Sold by: Cloudfu
Deployed on AWS
A streamlined CentOS 9 ARM64 image for AWS Graviton instances, featuring a standardized minimal environment, hardened SSH access, system security settings, persistent logging, Chrony time synchronization, and essential operational defaults.
Overview
This CentOS 9 ARM64 image provides a standardized, security-focused operating system foundation for workloads running on AWS Graviton-based EC2 instances. It is designed for teams that want a clean and consistently configured starting point for application servers, development environments, automation workers, and custom infrastructure deployments.
The image applies a practical set of CIS-inspired system settings, including password complexity and aging policies, inactive-account controls, automatic shell timeouts, restricted sudo behavior with session logging, protected system files, and hardened kernel and network parameters. Unnecessary desktop components, services, Bluetooth packages, and legacy network protocol modules are removed or disabled to reduce system operational footprint.
Remote administration is secured through a hardened OpenSSH configuration. Root login, empty-password authentication, host-based authentication, keyboard-interactive authentication, X11 forwarding, TCP forwarding, and SSH agent forwarding are disabled. SSH connections use an explicitly defined set of modern ciphers, key-exchange algorithms, and message authentication codes. Authentication attempts, concurrent sessions, connection startup rates, and idle connections are also restricted.
For operational reliability, the image includes:
- CentOS 9 optimized for the ARM64 architecture and AWS Graviton instances
- Current operating system packages at image build time
- Chrony-based time synchronization
- UTC timezone and a consistent system locale
- Persistent systemd journal storage
- Rsyslog-based system and authentication logging
- Sudo activity logging and log rotation
- Increased file-descriptor limits for server workloads
- Reverse-path filtering, redirect protection, ASLR, and restricted kernel-pointer access
- A local build-information file for OS, architecture, kernel, image version, and build timestamp identification
Important configuration notes: IPv6, SSH port forwarding, SELinux enforcement, and the auditd package are disabled by this image baseline configuration. Customers should review these settings against their own security, networking, monitoring, and compliance requirements before deploying production workloads. This image is security-focused but is not represented as CIS-certified.
Highlights
- The image intentionally provides a minimal operating system baseline rather than a bundled application stack. Docker and application-specific runtimes are not enabled by default, allowing customers to install and manage only the components required for their workloads.
Details
Sold by
Delivery method
Delivery option
64-bit (Arm) Amazon Machine Image (AMI)
Latest version
Operating system
CentOs 9
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
a1.medium Recommended | $0.00 |
m6gd.2xlarge | $0.38 |
m8gd.48xlarge | $9.12 |
is4gen.2xlarge | $0.38 |
c6g.metal | $3.04 |
x8g.24xlarge | $4.56 |
r8gd.4xlarge | $0.76 |
m6gd.12xlarge | $2.28 |
c7g.metal | $3.04 |
x2gd.medium | $0.00 |
Dimensions summary
You pay by the hour for the CentOS Stream 9 minimal ARM64 image running on your chosen AWS ARM64 (Graviton) instance. Each dimension maps to a specific EC2 instance type, so pricing scales with the compute size and family you select. Options span general-purpose, compute-optimized, memory-optimized, storage-optimized, and metal instances across several generations and sizes, from small (nano, micro, medium) up to large multi-core and bare-metal types. You are billed only while an instance runs, and total cost depends on how many hours each instance stays active.
Top-of-mind questions for buyers
One unit is one running EC2 instance of the ARM64 (Graviton) type you select. The hourly rate covers the CentOS Stream 9 minimal software layer on that instance. Each instance you launch bills separately. Larger instance families and sizes carry higher hourly rates than smaller ones.
The software rate meters running time only. A fully stopped instance does not accrue the hourly software charge. Underlying AWS storage fees for the volume may still apply while the instance is stopped. You resume software charges when you start the instance again.
This is usage-based, pay-as-you-go pricing. You pay per instance-hour with no upfront commitment. Charges start when an instance runs and stop when it shuts down. This suits variable or short-lived workloads, since you only pay for the hours each instance stays active.
www.cloudfu.net
Helpful?
Vendor refund policy
Fees for this product are not refundable. The instance can be terminated at any time to stop incurring charges.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (Arm) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Minimal version of CentOS 9 Aarch64 with latest updates
Additional details
Usage instructions
Once the instance is running, connect to it using a Secure Shell (SSH) client with the configured SSH key. The default username is 'ec2-user'.
Support
Vendor support
Email support for this AMI is available through support@cloudfu.com
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
A streamlined CentOS 9 image for AWS x86_64 instances, featuring a standardized minimal environment, hardened SSH access, system security settings, persistent logging, Chrony time synchronization, and essential operational defaults.
A streamlined CentOS 9 ARM64 image for AWS Graviton instances, featuring a standardized minimal environment, hardened SSH access, system security settings, persistent logging, Chrony time synchronization, and essential operational defaults.
This image is built using CentOS Stream 9 'Minimal Install' group of packages. SSH server is installed and can be used to connect to the instance using the 'ec2-user' user and the key specified at launch.
This product has charges associated with it for Hanwei's preparation of a CentOS Stream 9 ARM64 minimal AMI with a verified 64KB-page kernel, documented Non-LVM GPT layout, versioned security hardening, credential-free construction, and bounded EC2 validation. Applicable charges follow final Seller Portal terms.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.