Sold by: CoreNova Intelligence Limited
Deployed on AWS
AWS Free Tier
This product has charges associated with it for CoreNova hardening, maintenance, validation notes, and seller support. Rocky Linux 9 Hardened Production AMI (x86_64, LVM, XFS) provides a hardened Rocky Linux 9 EC2 baseline with SSH lockdown, audit logging, AIDE, firewall controls, and buyer-side OpenSCAP notes.
Overview
This is a repackaged open source software product wherein additional charges apply for CoreNova hardening, maintenance, validation notes, and seller support.
Rocky Linux 9 Hardened Production AMI (x86_64, LVM, XFS) is a hardened EC2 AMI for teams that need a repeatable Rocky Linux 9 baseline on AWS. It is designed for platform engineering, DevOps, and security teams that want faster launch paths without building every host-control baseline from scratch.
Included baseline
- SSH key-only access with root login disabled; default user: rocky.
- Host firewall baseline with administrator SSH access.
- auditd, rsyslog, chrony, and AIDE configured during image build.
- Automatic security updates enabled where supported by the operating system.
- OpenSCAP and CIS-oriented validation notes for buyer-side review.
- Online volume-growth helper for LVM-based layouts.
Best for
- Bastion hosts and jump boxes with key-only administration.
- Application servers that need a documented hardened OS baseline.
- Security-sensitive labs, demos, and production-oriented EC2 workloads.
- Teams standardizing on Rocky Linux 9 across AWS accounts.
Storage and architecture
LVM with XFS for separated operating-system paths and online growth.
Architecture: x86_64. Recommended instance type: t3.medium.
Security and compliance
This listing provides a hardened baseline and documentation intended to help buyers validate controls in their own AWS accounts. It is not an official CIS-certified image. Buyers remain responsible for organization-specific compliance validation, patch policy, logging retention, and workload configuration.
Related CoreNova listings
- Rocky Linux 9 Hardened Graviton AMI (ARM64, LVM, XFS): https://aws.amazon.com/marketplace/pp/prodview-fdgqejippakmc
- AlmaLinux 9 Hardened Graviton AMI (ARM64, LVM, XFS): https://aws.amazon.com/marketplace/pp/prodview-tuymqeo5mity4
- CentOS Stream 9 Hardened Base Image (x86_64, Ext4): https://aws.amazon.com/marketplace/pp/prodview-sy2mdxkferghw
- Full CoreNova catalog: https://aws.amazon.com/marketplace/seller-profile?id=seller-kbf3ztbtbdc5o
Support
Email: support@corenovacloud.com Web: https://www.corenovacloud.com/
Include AWS Region, AMI ID, EC2 Instance ID, instance type, and steps to reproduce when opening a support request.
Highlights
- Hardened EC2 AMI with SSH key-only access, firewall baseline, auditd, AIDE, and automatic security updates where supported.
- Architecture: x86_64; recommended instance type: t3.medium.
- CIS-oriented OpenSCAP validation notes are included for buyer-side review; not official CIS certification.
Details
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
OtherLinux Rocky Linux 9
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on a fixed subscription cost and actual usage of the product. You pay the same amount each billing period for access, plus an additional amount according to how much you consume. The fixed subscription cost is prorated, so you're only charged for the number of days you've been subscribed. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier for more details.
- Monthly subscription
- $89.00/month
Dimension | Cost/hour |
|---|---|
t3.medium Recommended | $0.01 |
t3.micro | $0.01 |
t3a.xlarge | $0.01 |
t3a.large | $0.01 |
m6i.large | $0.01 |
t3.large | $0.01 |
t3a.2xlarge | $0.01 |
m5.xlarge | $0.01 |
t3.2xlarge | $0.01 |
t3.nano | $0.01 |
Dimensions summary
You pay by the hour for the EC2 instance type you run this hardened Rocky Linux 9 image on. The 16 dimensions are not tiers or feature levels. Each one maps to a specific instance size across two families: burstable t3 and t3a instances, and fixed-performance m5 and m6i instances. Your rate scales with the instance you pick, from smaller sizes like nano and micro up to 2xlarge. The software charge is separate from AWS infrastructure costs for EC2, EBS, networking, and data transfer, which AWS bills you directly.
Top-of-mind questions for buyers
You get a hardened Rocky Linux 9 production image with an LVM and XFS disk layout for x86_64 instances. It includes the firewalld host firewall. The image carries no baked-in passwords, keys, or credentials. You define access boundaries yourself in your AWS account.
The software fee meters running instance-hours. A fully stopped instance does not accrue the hourly software charge. Stopped instances may still incur AWS storage fees for attached EBS volumes. AWS bills those infrastructure costs directly, separate from the software charge.
The rate covers only the AWS Marketplace software fee. EC2 compute, EBS storage, NAT Gateway, public IPv4, and data transfer are billed by AWS directly. Vendor email support runs weekdays on a 5x8 schedule and does not include full operations of your applications, network, or IAM.
www.corenovacloud.com+2
Helpful?
Vendor refund policy
30-day refund on AWS Marketplace software fees for this product. Email support@corenovacloud.com with your AWS account ID and purchase date. Software fees only; EC2 charges are not refundable by the seller. We reply within 5 business days. Free trial: no software charges during the trial.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Rocky Linux 9 Hardened Production AMI (x86_64, LVM, XFS) - CoreNova
Version: v20260706
This release rebuilds the AMI with the standardized CoreNova builder-ami pipeline.
Baseline:
- Latest available upstream OS packages at build time.
- SSH key-only access, root login disabled.
- auditd, rsyslog, chrony, and AIDE baseline.
- Firewall baseline with SSH allowed.
- Automatic security update service enabled where supported.
- Cloud-init cleaned before image capture.
- Marketplace checks require unencrypted EBS snapshots and no existing product codes.
Architecture: x86_64 Storage layout: lvm-xfs Filesystem: xfs Source AMI: ami-07f1ef003bc5de2b1 (us-east-1) AMI: ami-0b964804e225ad710 (us-east-1)
Compliance note: This image provides a hardened baseline and validation artifacts. Buyers should run their own compliance validation for their regulatory requirements.
Additional details
Usage instructions
Overview
Rocky Linux 9 Hardened Production AMI (x86_64, LVM, XFS) is a hardened EC2 AMI built by CoreNova Intelligence Limited for production use. The AMI does not expire and does not disable features based on time, user count, or instance count.
Recommended instance type: t3.medium. AMI: ami-0b964804e225ad710 (us-east-1).
Launch checklist
- Subscribe in AWS Marketplace, then launch in us-east-1.
- Select an instance type compatible with x86_64.
- Select your EC2 SSH key pair. Password login is disabled.
- Restrict inbound TCP 22 to trusted administrator IP ranges.
- Review EC2 instance, EBS, data transfer, and AWS Marketplace software charges before launch.
First connection
ssh -i your-key.pem rocky@YOUR_PUBLIC_IP
Post-launch health verification
systemctl is-active rsyslog systemctl is-active chronyd || systemctl is-active chrony sudo sshd -T | grep -E 'permitrootlogin|passwordauthentication' sudo systemctl is-active firewalld sudo lvs findmnt /tmp /var /home || true
Expected SSH settings: permitrootlogin no passwordauthentication no
Also verify EC2 instance status checks in the Amazon EC2 console.
Sensitive data and credentials
The AMI does not include hardcoded passwords, private keys, AWS credentials, or customer data. Customer-created keys and workload data remain in the buyer's AWS account. Linux system logs are stored under /var/log unless the buyer changes operating-system defaults.
Encryption
The Marketplace source AMI uses unencrypted EBS snapshots as required for AWS Marketplace AMI ingestion. Buyers can launch or copy the AMI with encrypted EBS volumes according to their own AWS account policy.
Service quotas and costs
This AMI uses standard EC2, EBS, networking, and AWS Marketplace software billing. Request quota increases through AWS Service Quotas if the account lacks enough EC2 instances, vCPUs, Elastic IPs, or EBS capacity. AWS infrastructure charges are billed separately by AWS.
Support
Email: support@corenovacloud.com Web: https://www.corenovacloud.com/
Include AWS Region, AMI ID, EC2 Instance ID, instance type, and steps to reproduce.
Resources
Vendor resources
Support
Vendor support
Email: support@corenovacloud.com
Web: https://www.corenovacloud.com/
CoreNova supports launch, SSH access, baseline service checks, Marketplace AMI metadata, and documented hardening behavior. Include AWS Region, AMI ID, EC2 Instance ID, instance type, and steps to reproduce.
Refund: 30-day refund on Marketplace software fees for verified technical issues. AWS infrastructure charges are billed by AWS and are not refundable by the seller.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
This product has charges associated with it for CoreNova hardening, maintenance, validation notes, and seller support. Rocky Linux 9 Hardened Graviton AMI (ARM64, LVM, XFS) provides a hardened Rocky Linux 9 EC2 baseline with SSH lockdown, audit logging, AIDE, firewall controls, and buyer-side OpenSCAP notes.
This product has charges associated with it for CoreNova hardening, maintenance, validation notes, and seller support. AlmaLinux 9 Hardened Production AMI (x86_64, LVM, XFS) provides a hardened AlmaLinux 9 EC2 baseline with SSH lockdown, audit logging, AIDE, firewall controls, and buyer-side OpenSCAP notes.
This product has charges associated with it for CoreNova hardening, maintenance, validation notes, and seller support. AlmaLinux 9 Hardened Graviton AMI (ARM64, LVM, XFS) provides a hardened AlmaLinux 9 EC2 baseline with SSH lockdown, audit logging, AIDE, firewall controls, and buyer-side OpenSCAP notes.
This product has charges associated with it for CoreNova hardening, maintenance, validation notes, and seller support. CentOS Stream 9 Hardened Base Image (x86_64, Ext4) provides a hardened CentOS Stream 9 EC2 baseline with SSH lockdown, audit logging, AIDE, firewall controls, and buyer-side OpenSCAP notes.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.