This is a repackaged software product wherein additional charges apply for seller hardening, preconfiguration, and maintenance. Pre-configured RHEL 10 AMI with SELinux enforcing, SSH hardening, fail2ban, CloudWatch Agent, AIDE, and OpenSCAP evaluation against the CIS Red Hat Enterprise Linux 10 Level 1 Server benchmark.
This is a repackaged software product wherein additional charges apply for seller hardening, preconfiguration, and maintenance.
This RHEL 10 AMI is built for teams that want a clean Red Hat Enterprise Linux start on EC2, without spending the first hours on basic security and AWS tooling. It ships with a practical security baseline already applied and an OpenSCAP evaluation against the CIS Red Hat Enterprise Linux 10 Benchmark for Level 1 Server.The OpenSCAP HTML compliance report is available on the instance at /var/log/oscap-report-l1.html, so you can review the results immediately after launch.What is included:
SELinux configured in Enforcing mode
Hardened SSH configuration (key-based authentication only, root login disabled)
fail2ban pre-configured to protect against SSH brute-force attempts
Amazon CloudWatch Agent pre-installed and ready for metrics and logs
AIDE initialized for file integrity monitoring
chrony for accurate time synchronization
AWS Systems Manager (SSM) Agent and AWS CLI v2 pre-installed
Cloud-optimized sysctl settings
Built-in os-status utility for a quick system overview
The image is designed as a solid starting point for production workloads. It reduces initial setup time while giving you a clear view of the security posture through the included OpenSCAP report. You remain free to adjust any settings to match your specific compliance or operational requirements.
Highlights
OpenSCAP evaluation against CIS Level 1 Server with report at /var/log/oscap-report-l1.html
AWS-ready: SSM Agent, AWS CLI v2, and cloud-optimized settings
AWS integration ready: SSM Agent and AWS CLI v2 pre-installed. Cloud-optimized sysctl tuning and os-status utility for quick system health checks
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier for more details.
You pay by the hour for a hardened Red Hat Enterprise Linux 10.1 machine image. Pricing is not tiered. Instead, each dimension maps to one specific AWS EC2 instance type, such as general-purpose, compute-optimized, memory-optimized, storage, GPU, and high-memory families. You pick the instance type that matches your workload. The hourly software rate scales with the size and capability of the instance you choose. Larger instances carry higher hourly rates than smaller ones in the same family. You are billed only for the hours each instance runs.
Top-of-mind questions for buyers
What exactly does the hourly software charge cover, and what am I billed for separately?
The hourly rate covers the hardened Red Hat Enterprise Linux 10.1 image running on your chosen EC2 instance. This is the software licence charge. Underlying AWS compute, storage, and network costs are billed separately by AWS at their own rates. Both appear together on your AWS invoice.
Am I charged the hourly software fee when an instance is stopped or paused?
The software fee meters running time only. A stopped or paused instance does not accrue the hourly software charge. You may still owe underlying AWS storage fees for attached volumes while the instance is stopped, but the image licence bills active hours.
If I switch to a different instance type, does the software rate change automatically?
Yes. Each instance type maps to its own hourly software rate. When you launch or resize to a different type, billing follows that type's rate for the hours it runs. The change is automatic based on which instance is active. No manual plan upgrade is needed.
www.tiovit.com
Helpful?
Vendor refund policy
The instance can be terminated at anytime to stop incurring charges. No refund available.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Initial release of the hardened Red Hat Enterprise Linux 10 AMI. Includes SELinux enforcing mode, SSH key-only authentication with root login disabled, fail2ban for SSH protection, pre-configured Amazon CloudWatch Agent, AIDE file integrity monitoring, chrony, AWS Systems Manager Agent, AWS CLI v2, cloud-optimized sysctl tuning, and the os-status utility. OpenSCAP evaluation against CIS Red Hat Enterprise Linux 10 Benchmark Level 1 Server completed with an approximate score of 79 percent. This is a repackaged open source software product.
Additional details
Usage instructions
SSH to the instance and login as 'ec2-user' using the key specified at launch.
Navigate to your Amazon EC2 console and verify that you're in the correct region.
Choose Instance and select your launched instance.
Select the server to display your metadata page and choose the Status checks tab at the bottom of the page to review if your status checks passed or failed.
Or
Select monitor an troubleshoot and select get system log to see the system log or select get instance screenshot to see state of your screen at the current time
The operating system does not save any sensitive information for the customers. The customer is responsible for saving any information, sensitive or not.
The data saved on the volumes is not encrypted by default.
All instance authentication must use key pair access, not password-based authentication.
AMIs does not contain passwords, authentication keys, key pairs, security keys, or other credentials.
PasswordAuthentication is set to NO in sshd_config.
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
This is a repackaged open source software product with additional charges for the value-added configuration. Hardened Rocky Linux 8.10 AMI aligned with CIS Level 1 recommendations (OpenSCAP score of 77.00%, reflecting a solid security baseline). Security report can be generated on demand by running OpenSCAP.
This is a repackaged open source software product with additional charges for the value-added configuration. Hardened Rocky Linux 9 AMI aligned with CIS Level 1 recommendations (OpenSCAP score of 77.25%, reflecting a solid security baseline). Security report can be generated on demand by running OpenSCAP.
This product has charges associated with it for providing seller premium support. The Red Hat 10 instance is pre-configured and hardened to the Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG) standard, delivering enhanced security over a baseline image. Benefit from a fully maintained hardened image with regular STIG updates, security patches, and hotfixes, along with limited premium OS support to assist with troubleshooting, optimization, and compliance guidance. This makes it an ideal choice for companies that require a secure, compliance-ready, production-quality OS backed by expert assistance.
This is a repackaged open source software product wherein additional charges apply for a pre-hardened, CIS- and PCI-DSS-benchmarked image. This distribution of Linux is based on Rocky Linux 10 and is built and security hardened by OpenLogic by Perforce, configured to conform to both PCI-DSS and CIS2 (Server) standards.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.