This product has charges associated with it for security hardening and compliance alignment. Madarson IT pre-hardened Windows Server 2022 AMI helps compliance teams achieve audit-readiness on day one, eliminating manual hardening for NIST CSF, PCI DSS, and HIPAA workloads.
Madarson IT Hardened Windows Server 2022 - Foundational Security AMI
This is a repackaged software product wherein additional charges apply for security hardening, compliance alignment, and ongoing maintenance of this image.
Eliminate manual hardening and achieve compliance-ready Windows Server deployments from day one. This pre-configured AMI applies foundational hardening controls to the latest Windows Server 2022 Base image, giving compliance officers, IT administrators, and DevOps engineers a secure baseline that maps to established regulatory frameworks.
Who This Is For
This hardened AMI is built for organizations in regulated industries that need audit-ready infrastructure without weeks of manual configuration:
Healthcare organizations deploying HIPAA-compliant workloads that require documented security baselines
Retailers and financial services firms needing PCI DSS-ready servers for payment processing environments
Government agencies and contractors aligning to NIST Cybersecurity Framework requirements
Enterprise IT teams seeking to reduce attack surface across Windows Server fleets
Key Features
Foundational Security Hardening - Pre-applied OS-level security controls based on hardening recommendations for Windows Server 2022
Compliance Framework Mapping - Hardening controls map to NIST Cybersecurity Framework (CSF), ISO 27000 series, PCI DSS, HIPAA, and other regulatory standards
Regular Updates - Images are maintained with current patches and hardening rule updates to address emerging vulnerabilities
Reduced Attack Surface - Disabled unnecessary protocols, services, and features that create potential entry points for cyberattacks
Compliance Mappings
The hardening configuration addresses controls across multiple frameworks:
NIST Cybersecurity Framework (CSF)
ISO 27000 series
PCI DSS
HIPAA Security Rule
Deployment Overview
Launch this AMI from AWS Marketplace and connect via RDP to a pre-hardened Windows Server 2022 environment. The hardening is applied at the OS level, covering security policies, registry settings, audit configurations, and service restrictions. Post-launch, organizations may need to customize settings based on their specific requirements, such as domain join configurations, application-specific exceptions, or additional Group Policy Objects.
Important Considerations
This foundational hardened image establishes a baseline level of security and reduces risk exposure to common cyber threats. Organizations should consider this as a starting point and may need to:
Apply additional application-layer hardening based on workload requirements
Configure network security groups and VPC settings appropriate to their environment
Implement additional monitoring and logging based on their compliance program
Review and adjust hardening controls that may conflict with specific application requirements
Why Madarson IT
Madarson IT certified images are always up to date, secure, follow industry standards, and are built to work right out of the box. Our hardening process helps protect against unauthorized access, denial of service, and other cyber threats by systematically limiting potential weaknesses that make systems vulnerable to cyberattacks.
Disclaimer: Windows Server is a trademark of Microsoft Corporation. This offering is provided by Madarson IT and is not affiliated with, endorsed by, or sponsored by Microsoft Corporation.
Highlights
Foundational hardening controls pre-applied to Windows Server 2022, mapping to NIST Cybersecurity Framework, ISO 27000, PCI DSS, and HIPAA. Organizations in healthcare, financial services, and government can deploy audit-ready infrastructure without weeks of manual configuration, establishing a documented security baseline from the first launch.
Reduced attack surface through systematic disabling of unnecessary services, protocols, and features. Stringent access controls enforce secure authentication settings and limit administrative access paths, helping protect against unauthorized access, denial of service, and other cyber threats that exploit default Windows Server configurations.
Regularly updated and maintained by Madarson IT to address emerging vulnerabilities and evolving hardening requirements. Images are built to work out of the box, allowing compliance teams and IT administrators to focus on application-layer requirements rather than spending time on foundational OS-level security hardening tasks.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
You pay by the hour for a security-hardened Windows Server 2022 image running on your chosen Amazon EC2 instance type. The software price is the same across every option; what changes is the instance size you select. General-purpose, compute, memory, storage, and GPU instance families are all available. Rates scale with instance capacity — larger instances (such as 32xlarge sizes) cost more per hour than smaller ones (such as medium or xlarge sizes). You run an instance only when you need it, and billing stops when it stops.
Top-of-mind questions for buyers
What do I actually get when I launch one of these hourly instances?
You get a security-hardened Windows Server 2022 machine image running on the Amazon EC2 instance type you select. The image is pre-configured to meet common compliance frameworks and is updated with current security patches. Each running instance of any listed size bills at that size's hourly rate.
Am I charged when I stop or pause the instance?
Software charges apply per hour only while the instance runs. When you stop the instance, the hourly software charge stops. A stopped instance may still accrue underlying AWS storage fees for its attached volumes, but the hardened image licence meters running time only.
Why is the hourly rate different across the instance types listed?
The software is the same on every option. What changes is the EC2 instance size you pick. Rates scale with instance capacity, so larger sizes such as 32xlarge cost more per hour than smaller ones such as medium or xlarge. You choose the size that fits your workload.
madarsonit.com
Helpful?
Vendor refund policy
There is no refund policy for this image.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Hardened Windows Server 2022 Base image with Level 1: Foundational.
Additional details
Usage instructions
Allow RDP access in your security group
Access the ec2 with the username: Administrator
To connect to the Instance:
Allow inbound RDP access in your security group (TCP port 3389)
Sign in to the AWS Management Console, open the Amazon EC2 console, and choose your Windows Server instance.
Then, select Connect, then Get Password, and then Choose File (private key of the ec2 instance).
Connect to the instance: Use Remote Desktop Connection (RDP) to connect to the instance.
Access the ec2 with the default username: "Administrator" and the password provided
You can also use Systems Manager (SSM) to access the Windows ec2 instance
For questions about this hardened Windows Server 2022 AMI, including configuration assistance, compliance inquiries, or private offers, contact Madarson IT at info@madarsonit.com.
Support scope includes:
Questions about the hardening configuration and applied controls
Guidance on customizing hardening settings for your specific environment
Private offer requests for volume deployments
Compliance and audit consultation needs
Troubleshooting hardening-related issues
When contacting support, please include your AWS account ID and the instance ID of the affected deployment.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
This product has charges associated with it for security hardening and compliance alignment. Madarson IT hardened Windows Server 2022 AMI - pre-configured for NIST CSF, PCI DSS, and HIPAA compliance. Deploy a security-optimized EC2 instance ready for regulated workloads.
This product has charges associated with it for security hardening and compliance alignment. Madarson IT pre-hardened Windows Server 2019 AMI - deploy audit-ready EC2 instances mapped to NIST CSF, PCI DSS, and HIPAA frameworks in minutes.
This product has charges associated with it for STIG security hardening. AWS EC2 image based on the latest Windows Server 2022 Base build, pre-configured to support DISA STIG compliance. Designed for U.S. Government, Department of Defense, and federal contractor workloads where elevated security baselines and the standard DoD warning banner are required from day one.
This product has charges associated with it for security hardening and compliance alignment. Madarson IT Level 1 hardened Windows Server 2025 Core AMI - pre-configured for regulatory compliance, headless operation, and automation-first cloud workloads on AWS.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.