Hardened Ubuntu 26.04 LTS - DISA STIG Compliant Server

This is a repackaged software product. Additional charges apply for DISA STIG security hardening applied to the base Ubuntu image.

Deploy a pre-hardened Ubuntu 26.04 LTS (Resolute Raccoon) EC2 instance that maps directly to DISA STIG requirements - eliminating weeks of manual security remediation. Built for U.S. Government agencies, Department of Defense contractors, and organizations operating under federal security mandates who need compliant infrastructure on day one.

This image applies government-grade security controls so your team can focus on mission workloads rather than baseline hardening.

• DoD-required login banner displayed at every session start
• Chrony time synchronization aligned to authoritative NTP sources
• SSSD configuration ready for directory integration
• Comprehensive auditd rules providing full audit trails for ISSO review
• PAM hardening with smart card support readiness
• SSH cipher and MAC algorithm restrictions enforcing only approved cryptographic methods
• Session timeout controls preventing unattended authenticated sessions
• Strict password policy enforcement aligned with federal requirements
• Immutable audit configuration preventing tampering with log integrity

This hardened image maps to multiple regulatory frameworks applicable to federal and defense environments:

• DISA STIG for Ubuntu Linux
• NIST SP 800-53 security controls
• NIST Cybersecurity Framework (CSF)
• FISMA requirements
• FedRAMP baseline controls
• Risk Management Framework (RMF) alignment

Organizations pursuing Authority to Operate (ATO) can use this image as a validated starting point that addresses foundational operating system controls across these frameworks.

1. Subscribe to this listing on AWS Marketplace
2. Launch the AMI in your target VPC via the AWS Console or CLI
3. Configure your security group to allow only required inbound traffic (e.g., SSH on port 22 from authorized CIDR ranges)
4. Connect via SSH using your EC2 key pair
5. Verify the DoD login banner appears upon connection
6. Review auditd status with "sudo auditctl -l" to confirm rules are active
7. Customize SSSD and directory integration for your environment if required
8. Run your organization's SCAP scanner to validate STIG compliance against the Ubuntu STIG benchmark

Madarson IT certified images are always up to date, follow industry standards, and are built to work right out of the box. Every image is validated before publishing and regularly updated to incorporate the latest security patches. This DISA STIG image builds on advanced hardening controls and applies additional government-grade security measures.

Madarson IT also offers Level 1 and Level 2 hardened Ubuntu images for organizations with different compliance requirements, allowing you to standardize on a single vendor across security tiers.

Disclaimer: Canonical Ltd. owns the trademarks for Ubuntu and its associated branding. Madarson IT does not provide commercial licenses on any third-party product. This hardened image should be considered a starting point. Organizations may need to customize configurations based on their specific security requirements and risk profile.