Sold by: EASYCLOUD
Deployed on AWS
AWS Free Tier
This is a repackaged open source software product wherein additional charges apply for a pre-hardened, AWS-optimized image with verification reports and maintenance. This AMI delivers PostgreSQL 17 on a Rocky Linux 9.8 base hardened and tuned for EC2 by Easycloud-with security scan reports and SBOM.
Overview
This is a repackaged open source software product wherein additional charges apply for a pre-hardened, AWS-optimized image with verifiable evidence and maintenance. PostgreSQL 17 runs on a Rocky Linux 9.8 base hardened, tuned for Amazon EC2 workloads, and shipped with a complete evidence pack and Software Bill of Materials (SBOM).
Value-Added Features
PostgreSQL 17 Deployment:
-
Best-Practice Deployment: PostgreSQL 17 installed and enabled following official AWS and PostgreSQL guidelines, ready to accept connections on first launch.
-
Secure Defaults, Zero Configuration Drift: The upstream default peer authentication is preserved and network access is restricted to localhost, so the database is never exposed to the public internet by accident.
-
Bloat-Free Data Layer: CPU and memory go to query planning and transaction processing rather than unused system services.
Hardened Operating System Base:
-
Security Hardening: SELinux enforcing with the targeted policy, ICMP redirects disabled, unused kernel modules blocked, and a shorter SSH login window.
-
Fully Patched at Release: Zero packages with a pending update at build time, verified. The complete CVE scan ships inside the image.
Comprehensive Evidence Pack:
Every AMI carries an evidence pack under /opt/optimization-report/:
- Tuning_Parameters.txt: Every performance tuning parameter, each shown against the Rocky Linux default, with how to undo it.
- Security_Parameters.txt: SELinux and every security setting, each shown against the Rocky Linux default, with how to undo it.
- sbom.spdx.json: Software Bill of Materials in SPDX format, generated from the RPM database.
- cve_scan.txt / cve_scan_full.txt.gz: Vulnerability scan reports categorizing CVEs by upstream patch availability.
- key_files.sha256: SHA-256 checksums of the key configuration files described in the reports, so the delivered state can be verified.
- README.txt: Index of artifact contents, operational guidelines, and configuration defaults, including the installed software.
Reliability Validation:
- Validation Testing: Functional verification on clean AMI launches through multi-round integration testing, covering the complete database lifecycle with SELinux enforcing.
AWS Network & Kernel Tuning:
-
Network Stack: TCP BBR congestion control with fair queueing, increased connection backlogs, buffer adjustments, and MTU probing enabled.
-
System Tuning: Red Hat tuned daemon active with a custom cloud profile, transparent hugepages set to madvise, and modified memory/EBS writeback parameters.
-
EC2 Integration: NVMe I/O timeouts, Amazon Time Sync (chrony), IRQ balance daemon, and size-capped persistent journald logging.
Operational Tools:
- Preinstalled Tools: AWS SSM Session Manager enabled, CloudWatch Agent installed (disabled by default).
Maintenance:
- Maintenance Specifications: Rebuilt and updated bi-weekly to monthly incorporating upstream PostgreSQL and Rocky Linux 9.8 security updates, with artifact documentation refreshed per release.
About PostgreSQL 17
One of the world's most advanced open-source relational database systems, known for strict ACID compliance, a rich SQL feature set, and deep extensibility through JSONB, full text search, and foreign data wrappers. PostgreSQL 17 builds on that foundation with further improvements to query planning, vacuum efficiency, and logical replication, serving transactional and analytical workloads alike, and integrates with ORM layers such as Hibernate and SQLAlchemy and frameworks including Django and FastAPI.
About Rocky Linux 9
Built directly from RHEL 9 source code for binary compatibility with the Red Hat 9 ecosystem, with predictable update cadences and a maintenance lifecycle through 2032. Any application compiled, certified, or documented for RHEL 9 runs without modification, and the platform is structurally aligned with AlmaLinux, CentOS Stream, and legacy CentOS deployments.
The Perfect High-Performance Data Layer: By starting with a bloat-free Rocky Linux 9 installation, maximum CPU and memory are dedicated entirely to query planning and transaction processing. This makes it the perfect, conflict-free foundation for relational and analytical workloads alongside MySQL, MariaDB, Percona Server, Amazon Aurora, Oracle, and Microsoft SQL Server, and for ORM-driven application layers built with Hibernate and SQLAlchemy. It seamlessly integrates with modern frameworks such as Django, Ruby on Rails, and FastAPI, and serves as a rock-solid backend for low-code and self-hosted platforms including Supabase, NocoDB, Appsmith, Odoo, Keycloak, Directus, Strapi, and GitLab, as well as analytical engines like ClickHouse, ensuring your database infrastructure scales without limits.
Highlights
- PostgreSQL 17 on a Hardened Base: Pre-configured with SELinux enforcing, network kernel parameter hardening, kernel module blocklists, and SSH hardening out of the box.
- Verifiable Evidence Pack and SBOM: A 7-file evidence pack ships inside the image, with tuning and security reports showing each setting against the Rocky Linux default, a CVE scan, configuration checksums, and a complete SPDX Software Bill of Materials.
- PostgreSQL 17: Best-practice deployment. Secure defaults preserved - upstream peer authentication with access bound to localhost - on an EC2-tuned base with TCP BBR and Red Hat tuned cloud profiles, rebuilt bi-weekly to monthly with upstream security patches.
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
OtherLinux 9
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier for more details.
- ...
Dimension | Cost/hour |
|---|---|
t3.medium Recommended | $0.04 |
t2.micro | $0.03 |
t3.micro | $0.03 |
r6i.8xlarge | $0.39 |
m6i.12xlarge | $0.68 |
m5ad.2xlarge | $0.19 |
r6in.4xlarge | $0.29 |
r8id.24xlarge | $0.68 |
m8i.32xlarge | $0.68 |
r6id.xlarge | $0.19 |
Dimensions summary
You pay by the hour for PostgreSQL-17 running on a hardened, minimal Rocky Linux 9 image. Each dimension maps to one AWS EC2 instance type, and the hourly rate reflects that instance's size and family. Smaller instances like t3.nano or m1.small carry lower rates, while large or metal instances such as p5.48xlarge or m8a.metal-48xl cost more. You pick the instance that fits your database workload, compute, memory, and storage needs. Billing scales with how many hours you run the chosen instance. There are no tiers or upfront commitments; you only pay for actual runtime.
Top-of-mind questions for buyers
Each hourly rate covers the software: PostgreSQL 17 running on a minimal, hardened Rocky Linux 9 image. The hardening follows security benchmarks and reduces the system's attack surface. You pay this per running instance-hour, separate from the underlying AWS EC2 compute charge that AWS bills directly.
Software charges meter running time only. A stopped or paused instance does not accrue the hourly software fee. Note that attached AWS storage, such as EBS volumes, may still incur AWS charges while the instance is stopped, but those come from AWS, not this software listing.
Each dimension is billed independently per hour for the instance type you run. Moving to a larger instance means you stop paying the old rate and start paying the new one. The change is manual: you launch the instance type you choose. There are no tiers or automatic upgrades.
www.easyclouds.io
Helpful?
Vendor refund policy
No refunds. Cancel anytime.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Latest Updates
Additional details
Usage instructions
Connection Methods
Once launched, SSH into the instance. The default username is 'rocky'. You can switch to the root user environment by running: sudo su -
Install Information
- OS: Rocky Linux 9.8
- PostgreSQL: 17
- Config File: '/var/lib/pgsql/17/data/postgresql.conf'
Usage Instructions
-
Access the database (peer authentication): This AMI uses PostgreSQL's official default peer authentication, so the 'postgres' database user has no password. Log in locally by running: sudo -u postgres psql
-
Run a query: Once inside the psql prompt, verify connectivity with: SELECT version();
-
Remote or password access (optional): By default only localhost is allowed. To enable password authentication and remote access, edit '/var/lib/pgsql/17/data/postgresql.conf' (listen_addresses) and '/var/lib/pgsql/17/data/pg_hba.conf' (authentication rules), then open port 5432 in the Security Group.
-
Manage the service: Use 'sudo systemctl start/stop/restart/status postgresql-17' to control the database service.
Firewall Configuration
-
SSH (Port 22): Required for initial system access.
-
PostgreSQL Database (Port 5432): Required for client connections to the database (localhost only by default; see step 3 to enable remote access).
-
Security Recommendation: For production environments, strictly limit access to these ports to trusted IP addresses only via cloud Security Groups or the local firewall.
Support
Vendor support
Should you encounter any issues while using the system, please do not hesitate to contact us via email at: support@easyclouds.io ,Thank you!
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
This is a repackaged open source software product wherein additional charges apply for a pre-hardened, AWS-optimized image with verification reports and maintenance. This AMI delivers PostgreSQL 16 on a Rocky Linux 9.8 base hardened and tuned for EC2 by Easycloud-with security scan reports and SBOM.
This is a repackaged open source software product wherein additional charges apply for a pre-hardened, AWS-optimized image with verification reports and maintenance. This AMI delivers PostgreSQL 18 on a Rocky Linux 9.8 base hardened and tuned for EC2 by Easycloud-with security scan reports and SBOM.
This product has charges associated with it for hardening, update maintenance, and seller support. Docker on Hardened Rocky Linux 9 is rigorously secured following STIG guidelines, recognized through a consensus-driven process as the industry benchmark for secure configuration, optimizing both security and efficiency.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.