Overview
This AMI is maintained by Trusted Images and includes open source software packages for the target operating system.
Apache HTTP Server 2.4 on Debian 12 - hardened with Trusted Images email support
Trusted Images packages Apache HTTP Server 2.4 on Debian 12 x86_64 for AWS customers who want a maintained web-server AMI with hardening evidence, monthly patch rebuilds, and documented support boundaries for image-specific questions.
What is included
- Debian 12 x86_64 AMI with a 30 GB gp3 root volume.
- Apache HTTP Server 2.4 installed from the Debian package repositories.
- Apache managed by systemd and enabled to start on boot.
- A minimal Trusted Images default landing page at the Apache document root.
- Trusted Images release metadata and evidence helper files installed under /etc/trusted-images and /usr/local/sbin.
Security hardening
- The AMI configuration requires IMDSv2 and HTTP metadata tokens.
- SSH root login and SSH password authentication are disabled by the common hardening role.
- Kernel and network sysctl hardening is applied during provisioning.
- The Apache service is checked for HTTP readiness for supported AMI versions.
- Supported AMI versions include source supply-chain scan output, runtime hardening checks, root filesystem scan results, package inventory, and SBOM data.
Patch and rebuild cadence
- The image is rebuilt monthly after upstream package updates and can be rebuilt sooner for urgent security fixes.
- Supported AMI versions include source scan output, package inventory, root filesystem scan results, hardening evidence, and SBOM artifacts.
Support process
- Support includes launch assistance, Apache configuration guidance, patch notifications, and issue triage.
- Contact support@trusted-images.com or use https://trusted-images.com/support for Trusted Images email support.
- Support does not include custom application development, migration projects, or managed continuous operations.
Evidence and SBOM availability
- Trusted Images retains source scan output, root filesystem scan results, hardening status, package inventory, service checks, and CycloneDX SBOM data for maintained AMI versions.
- SBOM and scan evidence can be provided through Trusted Images support for the published AMI version.
Launch and configuration basics
- Launch from AWS Marketplace with an x86_64 EC2 instance type sized for your workload.
- Apache listens on port 80. Open inbound HTTP/HTTPS in your EC2 security group only for the clients that should reach the web server.
- Add TLS certificates, virtual hosts, application content, and log forwarding according to your environment requirements.
- Review /etc/trusted-images/release after launch for image metadata.
No upstream affiliation
- Apache HTTP Server is open source software. Trusted Images is not affiliated with, endorsed by, or sponsored by the Apache Software Foundation or Apache HTTP Server maintainers.
Highlights
- Apache HTTP Server 2.4 on Debian 12 with the Apache service enabled and checked for local HTTP readiness for supported AMI versions.
- Hardened AWS AMI baseline with SSH password/root login disabled, kernel/network hardening, source supply-chain scanning, rootfs scanning, and SBOM evidence.
- Monthly patched Apache AMI rebuild cadence with Trusted Images email support for launch, configuration guidance, patch notifications, and issue triage.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Dimension | Description | Cost/hour |
|---|---|---|
t3.small Recommended | Trusted Images - Apache HTTP Server 2.4 on Debian 12 AMI on t3.small | $0.133 |
t3.micro | Trusted Images - Apache HTTP Server 2.4 on Debian 12 AMI on t3.micro | $0.066 |
t2.micro | Trusted Images - Apache HTTP Server 2.4 on Debian 12 AMI on t2.micro | $0.066 |
t2.small | Trusted Images - Apache HTTP Server 2.4 on Debian 12 AMI on t2.small | $0.133 |
t3a.micro | Trusted Images - Apache HTTP Server 2.4 on Debian 12 AMI on t3a.micro | $0.066 |
t3a.small | Trusted Images - Apache HTTP Server 2.4 on Debian 12 AMI on t3a.small | $0.133 |
t2.medium | Trusted Images - Apache HTTP Server 2.4 on Debian 12 AMI on t2.medium | $0.133 |
t3.medium | Trusted Images - Apache HTTP Server 2.4 on Debian 12 AMI on t3.medium | $0.133 |
t2.nano | Trusted Images - Apache HTTP Server 2.4 on Debian 12 AMI on t2.nano | $0.066 |
t3a.medium | Trusted Images - Apache HTTP Server 2.4 on Debian 12 AMI on t3a.medium | $0.133 |
Vendor refund policy
Refunds follow AWS Marketplace policies. Contact support@trusted-images.com for product support questions.
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Initial Trusted Images AMI version Debian202606300001; includes current security updates, hardening baseline, SBOM, and root filesystem scan summary.
Additional details
Usage instructions
Connect by SSH as admin. Review /etc/trusted-images/release, verify installed packages and service state where applicable, then configure authentication, storage, backups, monitoring, TLS, and EC2 security groups for your environment before production use.
Resources
Vendor resources
Support
Vendor support
Support Scope
Trusted Images email support covers launch guidance, AMI packaging questions, package/version questions for the delivered image, security patch and rebuild inquiries, Marketplace image issues, refund requests, and billing questions.
Included support topics:
- Security patch notifications and monthly rebuilds
- Configuration guidance and installation help
- Bug triage and workaround assistance
- Documentation and knowledge base access
Not included:
- Application code development
- Custom integrations or migrations
- Managed monitoring or continuous operations
How to Get Help
Contact support@trusted-images.com or use https://trusted-images.com/support . Include the Marketplace product name, AWS Region, AMI ID or product code when available, instance type, launch time, and a redacted description of the expected versus actual behavior. Do not send passwords, private keys, AWS secret keys, customer data, or logs containing secrets.
Support Boundaries
Support covers the AMI as delivered. Customer production operations, incident response, managed services, custom application code, customer data migration, and third-party integrations are outside the included support scope.
Buyer Responsibilities
You are responsible for AWS account configuration, IAM, VPC and security groups, TLS, backups, monitoring, data protection, application configuration, credential rotation, and production acceptance testing.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products

