Listing Thumbnail

    PostgreSQL-18 on Amazon Linux 2023 Minimal and Hardened

     Info
    Sold by: EASYCLOUD 
    Deployed on AWS
    AWS Free Tier
    This is a repackaged open source software product wherein additional charges apply for a pre-hardened, AWS-optimized image with verification reports and maintenance. This AMI delivers PostgreSQL 18 on a Amazon Linux 2023 base hardened and tuned for EC2 by Easycloud-with security scan reports and SBOM.

    Overview

    This is a repackaged open source software product wherein additional charges apply for a pre-hardened, AWS-optimized image with verifiable evidence and maintenance. PostgreSQL 18 runs on a Amazon Linux 2023 base hardened, tuned for Amazon EC2 workloads, and shipped with a complete evidence pack and Software Bill of Materials (SBOM).

    Value-Added Features

    PostgreSQL 18 Deployment:

    1. Best-Practice Deployment: PostgreSQL 18 installed and enabled following official AWS and PostgreSQL guidelines, ready to accept connections on first launch.

    2. Extensions Pre-loaded: The matching contrib extension set is installed alongside the server, so widely used modules such as pg_stat_statements, pgcrypto, and postgres_fdw are available immediately.

    3. Bloat-Free Data Layer: CPU and memory go to the PostgreSQL engine rather than unused system services.

    Hardened Operating System Base:

    1. Security Hardening: SELinux enforcing with the targeted policy, ICMP redirects disabled, unused kernel modules blocked, and a shorter SSH login window.

    2. Fully Patched at Release: Zero packages with a pending update at build time, verified. The complete CVE scan ships inside the image.

    Comprehensive Evidence Pack:

    Every AMI carries an evidence pack under /opt/optimization-report/:

    • Tuning_Parameters.txt: Every performance tuning parameter, each shown against the Amazon Linux default, with how to undo it.
    • Security_Parameters.txt: SELinux and every security setting, each shown against the Amazon Linux default, with how to undo it.
    • sbom.spdx.json: Software Bill of Materials in SPDX format, generated from the RPM database.
    • cve_scan.txt / cve_scan_full.txt.gz: Vulnerability scan reports categorizing CVEs by upstream patch availability.
    • key_files.sha256: SHA-256 checksums of the key configuration files described in the reports, so the delivered state can be verified.
    • README.txt: Index of artifact contents, operational guidelines, and configuration defaults, including the installed software.

    Reliability Validation:

    1. Validation Testing: Functional verification on clean AMI launches through multi-round integration testing, covering the complete database lifecycle with SELinux enforcing.

    AWS Network & Kernel Tuning:

    1. Network Stack: TCP BBR congestion control with fair queueing, increased connection backlogs, buffer adjustments, and MTU probing enabled.

    2. System Tuning: Red Hat tuned daemon active with a custom cloud profile, transparent hugepages set to madvise, and modified memory/EBS writeback parameters.

    3. EC2 Integration: NVMe I/O timeouts, Amazon Time Sync (chrony), IRQ balance daemon, and size-capped persistent journald logging.

    Operational Tools:

    1. Preinstalled Tools: AWS SSM Session Manager enabled, CloudWatch Agent installed (disabled by default).

    Maintenance:

    1. Maintenance Specifications: Rebuilt and updated bi-weekly to monthly incorporating upstream PostgreSQL and Amazon Linux 2023 security updates, with artifact documentation refreshed per release.

    About PostgreSQL 18

    One of the world's most advanced open-source relational database systems, known for strict ACID compliance, a rich SQL feature set, and deep extensibility through JSONB, full text search, and foreign data wrappers. Release 18 advances that lineage with an asynchronous I/O subsystem, skip scan for multicolumn B-tree indexes, and further logical replication improvements, delivering gains for transactional and analytical workloads alike, with upstream community maintenance through November 2030.

    About Amazon Linux 2023

    Maintained by AWS with a deterministic release cadence and quarterly updates, Amazon Linux 2023 integrates natively with AWS services and the EC2 Nitro platform. It ships SELinux enabled by default, its package set is curated for cloud workloads, and each major version carries a five-year lifecycle, giving teams a stable landing zone aligned with the AWS ecosystem.

    The Ultimate Relational Data Store: By starting with a bloat-free Amazon Linux 2023 installation, maximum CPU and memory are dedicated entirely to the PostgreSQL engine. This makes it the perfect, conflict-free foundation for transactional applications built with Django, Spring Boot, FastAPI, Node.js, and Python, including ORM stacks such as Hibernate, Prisma, and SQLAlchemy. It seamlessly integrates with self-hosted platforms that standardize on PostgreSQL (Supabase, Keycloak, Odoo, Discourse, Strapi, NocoDB, n8n), pairs naturally with adjacent data layers (MySQL, MariaDB, Redis), and serves as a rock-solid backbone for analytics, monitoring, and container platforms (Metabase, Grafana, Zabbix, Sentry, Docker, Kubernetes), ensuring your data infrastructure scales without limits.

    Highlights

    • PostgreSQL 18 on a Hardened Base: Pre-configured with SELinux enforcing, network kernel parameter hardening, kernel module blocklists, and SSH hardening out of the box.
    • Verifiable Evidence Pack and SBOM: A 7-file evidence pack ships inside the image, with tuning and security reports showing each setting against the Amazon Linux default, a CVE scan, configuration checksums, and a complete SPDX Software Bill of Materials.
    • PostgreSQL 18: Best-practice deployment. The matching contrib extension set installed alongside the server - on an EC2-tuned base with TCP BBR and Red Hat tuned cloud profiles, rebuilt bi-weekly to monthly with upstream security patches.

    Details

    Delivery method

    Delivery option
    64-bit (x86) Amazon Machine Image (AMI)

    Latest version

    Operating system
    AmazonLinux Amazon Linux 2023

    Deployed on AWS
    New

    Introducing multi-product solutions

    You can now purchase comprehensive solutions tailored to use cases and industries.

    Multi-product solutions

    Features and programs

    Financing for AWS Marketplace purchases

    AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
    Financing for AWS Marketplace purchases

    Pricing

    PostgreSQL-18 on Amazon Linux 2023 Minimal and Hardened

     Info
    Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
    Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator  to estimate your infrastructure costs.
    If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier  for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier  for more details.

    Usage costs (791)

     Info
    • ...
    Dimension
    Cost/hour
    t3.medium
    Recommended
    $0.04
    t2.micro
    $0.03
    t3.micro
    $0.03
    t2.nano
    $0.03
    t3.nano
    $0.03
    t3a.nano
    $0.03
    t1.micro
    $0.03
    t3a.micro
    $0.03
    m1.small
    $0.04
    t2.small
    $0.04

    AI Insights

     Info

    Dimensions summary

    You pay by the hour for this hardened PostgreSQL-18 image running on Amazon Linux 2023. Pricing is usage-based, with no upfront commitment. Each dimension maps to a specific Amazon EC2 instance type that you run the software on. The options span many families — general-purpose, compute-optimized, memory-optimized, storage-optimized, accelerated-computing, and bare-metal instances — in sizes from nano up through very large multi-xlarge and metal configurations. Your hourly rate scales with the instance you choose: smaller instances cost less per hour, and larger or specialized instances cost more. You select the instance that fits your workload and capacity needs.

    Top-of-mind questions for buyers

    You pay a software charge for the hardened PostgreSQL-18 image, metered per hour the instance runs. The rate is tied to the Amazon EC2 instance type you launch. The underlying AWS compute, storage, and data transfer are billed separately by AWS.
    The software charge meters running hours only. A stopped or powered-off instance does not accrue the hourly software fee. You may still pay AWS for attached storage while the instance is stopped, but the software license bills active run time.
    The image runs PostgreSQL-18 on Amazon Linux 2023 with security hardening applied, following recognized benchmark standards. The hourly charge covers this prebuilt, hardened image. You choose the instance size that matches your workload and capacity needs.
    www.easyclouds.io
    Helpful?

    Vendor refund policy

    No refunds. Cancel anytime.

    How can we make this page better?

    Tell us how we can improve this page, or report an issue with this product.
    Tell us how we can improve this page, or report an issue with this product.

    Legal

    Vendor terms and conditions

    Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .

    Content disclaimer

    Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.

    Usage information

     Info

    Delivery details

    64-bit (x86) Amazon Machine Image (AMI)

    Amazon Machine Image (AMI)

    An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.

    Version release notes

    Latest Updates

    Additional details

    Usage instructions

    Connection Methods

    Once launched, SSH into the instance. The default username is 'ec2-user'. You can switch to the root user environment by running: sudo su -

    Install Information

    • OS: Amazon Linux 2023

    • PostgreSQL: 18.4

    • Service Name: postgresql

    • Config File: '/var/lib/pgsql/data/postgresql.conf'

    • Authentication Config: '/var/lib/pgsql/data/pg_hba.conf'

    • Data Directory: '/var/lib/pgsql/data'

    1. Local Admin Access: Connect locally by running: 'sudo -u postgres psql'

    2. Manage Service: Use 'sudo systemctl start/stop/restart postgresql' to control the database daemon.

    3. Enable Remote Access:

    By default, PostgreSQL only allows local connections. To enable remote access, complete these exact steps:

    • Step 1: Open '/var/lib/pgsql/data/postgresql.conf', find the 'listen_addresses' parameter, uncomment it, and set it to: listen_addresses = '*'

    • Step 2: Open '/var/lib/pgsql/data/pg_hba.conf', scroll to the very bottom, and append this exact line: host all all 0.0.0.0/0 scram-sha-256

    • Step 3: Apply the configuration changes by running: sudo systemctl restart postgresql

    • Step 4: AWS Firewall: Go to your AWS Console and ensure the EC2 Security Group has an Inbound Rule allowing TCP Port 5432.

    Firewall Configuration

    • SSH (Port 22): Required for initial system access.

    • PostgreSQL (Port 5432): Required for remote database clients (e.g., pgAdmin, DBeaver) or application servers to connect.

    • Security Recommendation: For production environments, strictly limit access to ports 22 and 5432 to trusted IP addresses only via AWS Security Groups.

    Support

    Vendor support

    Should you encounter any issues while using the system, please do not hesitate to contact us via email at: support@easyclouds.io ,Thank you!

    AWS infrastructure support

    AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.

    Similar products

    Customer reviews

    Ratings and reviews

     Info
    0 ratings
    5 star
    4 star
    3 star
    2 star
    1 star
    0%
    0%
    0%
    0%
    0%
    0 reviews
    No customer reviews yet
    Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.