Sold by: ClearScale
Deployed on AWS
AWS Free Tier
A high-performance, production-ready Windows Server 2025 Datacenter base image. Pre-hardened to CIS Level 1 benchmarks for immediate compliance, stripped of unnecessary services and fully supported by Clearscale.
5
Overview
This is a hardened, enterprise-ready operating system image optimized for AWS deployments. Built-in security hardening and ongoing lifecycle maintenance are included for an additional charge.
Leverage the reliability and security of Windows Server 2025 Datacenter, engineered specifically for AWS environments. This Amazon Machine Image (AMI) delivers a highly secure, stable foundation right out of the box, drastically reducing the time required for initial configuration and manual security patching.
Core Capabilities:
- Latest Updates: Windows Server 2025 Datacenter deployed with the most recent security updates applied at build time.
- CIS Hardening: CIS Level 1 Benchmark configurations applied to guarantee a secure baseline.
- IMDSv2 Enforced: Strictly enforced metadata service to protect against SSRF vulnerabilities.
- Seamless Management: Native AWS Systems Manager (SSM) Agent pre-installed for streamlined remote management.
- Clean OS: Zero unnecessary telemetry agents and absolutely no cross-cloud bloatware.
- AWS Optimized: AWS EC2Launch v2 configured for optimal boot performance and sysprep execution.
Operational Advantages:
- Rapid Deployment: Spin up fully hardened, compliant instances in minutes rather than hours or days.
- Reduced Overhead: Eliminates the tedious need for manual OS hardening, patching, and agent installation before deploying workloads.
- Audit-Ready Infrastructure: Pre-configured to align with strict industry security standards, easing the burden of compliance audits and security reviews.
Use Cases:
- Enterprise Workloads: The perfect foundation for deploying and managing mission-critical applications or services at scale.
- Regulated Environments: Highly recommended for industries requiring strict security baselines, such as finance, healthcare, and public sector.
- Development and Testing: Provides a secure, highly predictable environment for software engineering teams to iterate and stage safely.
Accelerate your AWS journey with Windows Server 2025 Datacenter and build your cloud strategies on a secure, optimized infrastructure.
Highlights
- CIS Level 1 Compliant Out of the Box: Strict GPOs applied, IMDSv2 enforced, and insecure legacy protocols disabled. Every control is applied at build time, not as an afterthought.
- Built Fresh & Verified: Built clean from the latest AWS Windows Server 2025 Datacenter source. Guaranteed to have the latest AWS PV Drivers, SSM Agent, and EC2Launch v2.
- Zero Bloatware: Free from unnecessary third-party telemetry and cross-cloud agents. Just a clean, fast, and secure Windows environment optimized for AWS.
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
Win 2025
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier for more details.
Dimension | Cost/hour |
|---|---|
t3.xlarge Recommended | $0.24 |
t2.micro | $0.19 |
t3.micro | $0.06 |
r6i.8xlarge | $1.92 |
m5ad.2xlarge | $0.48 |
m6i.12xlarge | $2.88 |
r5n.2xlarge | $0.48 |
i7ie.3xlarge | $0.72 |
r6id.xlarge | $0.24 |
r6in.4xlarge | $0.96 |
Vendor refund policy
Usage is billed by AWS on a pay-as-you-go basis by the hour. The Windows Server 2025 instance can be stopped or terminated at any time to stop incurring additional software charges. Refunds are not available once launched. To completely avoid future costs, ensure you terminate the instance and cancel your AWS Marketplace subscription.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
[Release v16JUN26] ClearImages windows-2025-full-x86-64 (corrected OS name WIN2025)
Additional details
Usage instructions
- Launch via AWS Marketplace 1-Click or EC2 console.
- Select t3.large or larger. Ensure your security group allows inbound RDP (port 3389) from your IP.
- Retrieve your Windows Administrator password from the EC2 console using your Key Pair.
- Connect via RDP client to the public IP. Or use AWS Systems Manager Fleet Manager from the EC2 console (no RDP port required).
Resources
Vendor resources
Support
Vendor support
Email support for this AMI is available through the following: https://clearscale.com/clearimages/support OR clearimages-support@clearscale.com
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
A high-performance, production-ready Windows Server 2025 Datacenter Core base image. Pre-hardened to CIS Level 1 benchmarks for immediate compliance, stripped of unnecessary services and fully supported by Clearscale.
This Windows Server 2025 Japanese product has charges associated with it for seller support and maintenance. Ready-to-use minimal Windows Server 2025 Datacenter Japanese AMI using a 30 GiB volume. Only the Administrator account is allowed to login using the password randomly generated during the first boot. In this Windows Server 2025 AMI, the primary partition and filesystem automatically extends at launch if instance volume is bigger than the default 30 GiB. This Windows Server 2025 image has ENA enabled. All Windows Server 2025 security updates available at the image release date are included. This Windows Server 2025 AMI delivers a powerful and scalable environment tailored for enterprise applications in the AWS EC2 public cloud. Whether used for hosting applications, building cloud-native services, or managing database workloads, Windows Server 2025 adapts to diverse enterprise needs.
This Windows Server 2019 Japanese product has charges associated with it for seller support and maintenance. Ready-to-deploy Windows Server 2019 Japanese Datacenter AMI for AWS EC2, prepared for reliable cloud operations with Japanese configured as the default system language. Connect using the Administrator account and the password generated at first boot. When the attached volume is larger than the default, the primary partition and filesystem automatically expand at launch. ENA is enabled to support strong network throughput, and all security updates available at release time are included. Designed for Amazon EC2 environments, this image is suitable for line-of-business applications, web services, automation pipelines, remote administration, and database-backed systems on a proven Microsoft server platform. Win Server 2019 supports faster rollout with a familiar Windows environment in Japanese.
Includes support and maintenance fees. Minimal Windows Server 2022 Datacenter Japanese AMI using a 30 GiB volume. Only the Administrator account is allowed to login using the password randomly generated during the first boot. Primary partition and filesystem extends automatically at launch. ENA enabled.
This product has charges associated with it for seller support. Microsoft Windows Server 2022 AMI offers a robust and scalable server operating system designed to streamline application management and enhance security in the cloud. With features like enhanced Azure integration, improved performance analytics, and advanced Windows Defender capabilities, this AMI is ideal for enterprises seeking a reliable environment for their critical workloads. It supports containerization with Windows Server Containers, enabling seamless deployment of microservices, while its Active Directory enhancements simplify user management and authentication. Use cases include hosting enterprise applications, developing cloud-native applications, and managing virtualized environments. Leverage the full potential of your EC2 instances with Windows 2022 Server and ensure your applications run smoothly and securely in the AWS cloud.
Includes support and maintenance fees. Minimal Windows Server 2022 Datacenter AMI using a 30 GiB volume. Only the Administrator account is allowed to login using the password randomly generated during the first boot. Primary partition and filesystem extends automatically at launch. ENA enabled.
Customer reviews
reviewer2858658
Automated hardening has standardized our servers and reduces effort for secure Windows workloads
Reviewed on Jun 18, 2026
Review from a verified AWS customer
What is our primary use case?
We use ClearScale Windows Server 2025 as the base image for our .NET and IIS application servers on EC2 .
These instances host internal line of business web applications and Windows services, and several are domain joined to our AD environment. We needed a stable, secure, and consistently configured Windows base across our fleet.
How has it helped my organization?
It removed the manual Windows hardening and configuration step we used to run on every new server.
Because the image arrives CIS Level 1 hardened with the AWS tooling already in place, our servers come up patched, locked down, and ready to join the domain without a separate build-out pass.
That has improved consistency across our fleet, reduced configuration drift between servers, and made our internal security reviews noticeably faster.
What is most valuable?
The CIS Level 1 hardening applied through Group Policy at build time is the most valuable part.
Insecure legacy protocols are already disabled and IMDSv2 is enforced, so we start from a known-good, audit-ready baseline.
The AWS integration is also excellent.
The SSM Agent, EC2Launch v2, and the latest AWS PV drivers are pre-installed, so sysprep, boot performance, and remote management all work cleanly out of the box.
Being able to manage servers through SSM Fleet Manager without opening RDP to the internet is a real security win.
The absence of third-party telemetry and cross-cloud agents keeps the OS clean and predictable.
What needs improvement?
The first-boot time is longer than a stock Windows AMI.
Sysprep and the initial hardening pass add a noticeable delay before the instance is reachable, which is something to account for if you autoscale and need nodes ready quickly.
The hardened defaults also occasionally trip up common installers and agents.
A few of our deployment and monitoring tools assumed services or policies that the image had locked down, so we had to add exceptions.
A short compatibility checklist of what the hardening changes from a default Windows install would have saved us that debugging.
I would also like the option of a CIS Level 2 build for our more sensitive workloads since the image currently only ships a Level 1 baseline. Thanks.
For how long have I used the solution?
We have been using the ClearScale hardened image for around 6 months and have 15+ years of experience running Windows Server overall.
Which solution did I use previously and why did I switch?
We previously launched AWS's own Windows Server AMI and applied our own hardening with Group Policy and scripts/user-data after boot.
We switched to the ClearScale Windows Server 2025 image so the hardening and AWS tooling are already baked in and maintained for us, which removed a slow and error-prone post-launch step.
What's my experience with pricing, setup cost, and licensing?
The software charge sits on top of the underlying Windows EC2 cost, which is already higher than Linux, so model both together before you commit to a large fleet.
The hourly model suited our autoscaling pattern, but if you run steady, always-on servers it is worth pricing out annual or reserved EC2 commitments alongside it rather than assuming hourly is cheapest.
For us, the per-hour charge was easy to justify against the labor we removed, but I would advise running a short pilot on your actual instance mix to get a real per-server number before standardizing on it.
Which other solutions did I evaluate?
We evaluated staying on the base AWS Windows Server AMI with our own hardening automation and building an internal hardened golden image ourselves before selecting the ClearScale Windows image.
What other advice do I have?
Treat the hardened local policy as your floor and test your domain GPOs against it in a non-production OU before you roll the image out widely.
That surfaced a couple of policy conflicts for us early and saved pain later.
Build the image into a launch template with a sensible default instance type so right-sizing is consistent across the fleet, and fold its monthly refresh into your existing Patch Tuesday process rather than treating it as a separate track.
If you run a mix of full Desktop Experience and headless workloads, look at the Server Core variant for the headless tier to trim cost and attack surface.
Used that way it has been a dependable, low-maintenance Windows base.
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)