This RHEL 9 image is hardened to the High category of the US DoD DISA Security Technical Implementation Guide (STIG), covering CAT I to CAT III rules. Helps you meet DISA STIG technical controls. Compliance of your environment is determined by your assessor or Authorizing Official. Confirm the exact benchmark release, profile scope, and remediation coverage before deployment. Deploy only on a compatible architecture. Configure identity, network controls, TLS, storage, secrets, logging, monitoring, backups, capacity, updates, and recovery. Validate licensing, data handling, dependencies, security guidance, and upgrade procedures before production use.
Highlights
RHEL 9 image hardened to the US DoD DISA STIG High category, covering CAT I to CAT III rules.
Helps you meet DISA STIG technical controls. Compliance of your environment is determined by your assessor or Authorizing Official.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier for more details.
You pay by the hour for this hardened Red Hat Enterprise Linux 9 image, billed per running instance. Pricing follows the EC2 instance type you launch, so each dimension matches an AWS instance size. The options span general-purpose (t3, m5, m6i), compute-optimized (c5, c5n, c5d, c6i), memory-optimized (r5, r5d, r6i), storage-optimized (i3, i3en, i4i), and GPU (g4dn) families. Larger sizes within a family carry more CPU, memory, or storage and cost more per hour. The software layer is identical across all sizes; you choose the hardware that fits your workload.
Top-of-mind questions for buyers
Am I charged when my instance is stopped or powered off?
Software charges apply per running instance-hour. A stopped or powered-off instance does not accrue hourly software charges. You may still pay underlying AWS storage fees for attached volumes while the instance is stopped. The meter counts only running time.
What does the hourly rate cover besides the operating system?
The rate covers Red Hat Enterprise Linux 9 hardened to the DISA STIG High profile, applied at build time. It includes CAT I, CAT II and CAT III settings, a JSON hardening report, and audit and time-sync services. You access the instance over SSH with your own key pair.
Does the hardened software cost change if I pick a larger instance type?
The software is identical across every instance type listed. Your hourly charge changes because each dimension maps to a different EC2 instance size with different CPU, memory, or storage. You pick the hardware that fits your workload; the hardening profile stays the same.
secureanycloud.com
Helpful?
Vendor refund policy
No Refund but you can terminate the instance anytime to stop billing
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Updated with latest Security Patches & Industry Best Practices
Additional details
Usage instructions
To begin using this image, connect via SSH. Until you connect SSH into the instance and validate your credentials, you will not be able to access the Software. To connect to the operating system, use SSH and the username ec2-user.
For instructions on using SSH to connect to your instance, see the AWS EC2 documentation: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/AccessingInstancesLinux.html
Please note, this image may take up to 10 minutes to instantiate.
Software and dependencies: the software is installed in the image at build time; launching the instance downloads nothing and needs no ongoing external service. Operating system updates are fetched only when you run the package manager.
Data and encryption: application data, configuration and logs are kept on the instance's EBS volumes. The image applies no encryption of its own; turn on EBS encryption by default in your account if you need encryption at rest.
Health check: in the Amazon EC2 console, choose Instances, select your instance and open the Status checks tab; both the system and instance status checks should pass.
Cognosys provides technical support for Solution issues in multiple ways.Support can be availed by: 1. Email to Support@SecureAnyCloud.com (Preferred) 2. Live Support on
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
This product has charges associated with it for DISA STIG security hardening. Madarson IT pre-hardened RHEL 9 AMI for DISA STIG compliance. Launch a security-optimized EC2 instance ready for DoD and federal workloads out of the box.
StigReady Applied for Rocky Linux 10: DISA STIG remediation on the StigReady base, scored in the build. OpenSCAP score 96.6% against the unmodified SSG DISA STIG profile (as of 2026-10-19). Full evidence bundle (OpenSCAP, POA&M, SBOM, CVE) for every version.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.