Overview
Simplesense's AL2 hardened Amazon Machine Image (AMI) is configured per the Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG) guidelines for use as a baseline EC2 that gives the Defense Industrial Base (DIB), Department of Defense (DoD), and those concerned with getting an Authority to Operate (ATO) a repeatable head start to achieving compliance.
This Amazon Linux 2 AMI is specifically designed for compliance on DoD programs requiring an ATO and can enable programs to benefit from the rigorous testing and scanning conducted by Simplesense prior to publishing. Simplesense maintains compliance with the latest guidance from DISA and publishes new AMIs as STIGs are updated.
Any requests for pricing options including private offers or support should be directed to ami@simplesense.io .
Highlights
- Specifically hardened to support Department of Defense programs and provide a secure baseline OS for rapid implementation, integration, and compliance.
- Reduces time to obtain and maintain an Authority to Operate (ATO) by leveraging baselines used in pre-existing programs.
- The provided Amazon Machine Image (AMI) is hardened per Defense Information Security Agency (DISA) Security Technical Implementation Guidelines (STIG)s and scanned for validation with industry leading tools to ensure a secure baseline.
Details
Typical total price
$0.082/hour
Features and programs
Financing for AWS Marketplace purchases
Pricing
Free trial
- ...
Instance type | Product cost/hour | EC2 cost/hour | Total/hour |
|---|---|---|---|
t1.micro | $0.07 | $0.02 | $0.09 |
t2.nano | $0.07 | $0.006 | $0.076 |
t2.micro AWS Free Tier Recommended | $0.07 | $0.012 | $0.082 |
t2.small | $0.07 | $0.023 | $0.093 |
t2.medium | $0.07 | $0.046 | $0.116 |
t2.large | $0.07 | $0.093 | $0.163 |
t2.xlarge | $0.07 | $0.186 | $0.256 |
t2.2xlarge | $0.07 | $0.371 | $0.441 |
t3.nano | $0.07 | $0.005 | $0.075 |
t3.micro AWS Free Tier | $0.07 | $0.01 | $0.08 |
Additional AWS infrastructure costs
Type | Cost |
|---|---|
EBS General Purpose SSD (gp2) volumes | $0.10/per GB/month of provisioned storage |
Vendor refund policy
No refunds through AWS are available. Billing is completed through AWS and only for usage as reported by AWS.
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
- Base Image amzn2-ami-kernel-5.10-hvm-2.0.20241113.1-x86_64-gp2
- AWS stig-build-linux-high component version 2024.2.5/1
- Simplesense simp-ami-al2-kernel5-x86-64 component version 1.0.5/1
- FIPS Enabled
Additional details
Usage instructions
Once the instance is running, connect using SSH. Use "ec2-user" as the username. Immediately apply latest security updates after launching the instance.
Rules with source of 0.0.0.0/0 allow all IP addresses to access your instance. We recommend setting security group rules to allow access from known IP addresses only.
Location of all sensitive information saved by customers:
- No sensitive information saved
Explain all data encryption configuration:
- No data encryption configuration used
Step-by-step instructions for rotating programmatic system credentials and cryptographic keys:
- No cryptographic keys used
Detailed application instructions and data encryption/decryption techniques:
- Not Applicable
Step-by-step instructions for how to assess and monitor the health and proper function of the application:
- Navigate to your Amazon EC2 console and verify that you're in the correct region.
- Choose Instance and select your launched instance.
- Select the server to display your metadata page and choose the Status checks tab at the bottom of the page to review if your status checks passed or failed.
Support
Vendor support
Simplesense supports this AMI via the email address ami@simplesense.io only and is limited in scope to the features and capabilities added by Simplesense. This can include support such as bug reports, status updates regarding configuration changes, reporting scan discrepancies, and support on hardening. General AWS support is exclusive of this contract but available through AWS support tiers, third party consultants, or online resources.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.