Overview
This is a repackaged software product wherein additional charges apply for CoreNova hardening, maintenance, validation notes, and seller support.
Amazon Linux 2023 Hardened AMI is a hardened EC2 AMI for teams that need a repeatable Amazon Linux 2023 baseline on AWS. It is designed for platform engineering, DevOps, and security teams that want faster launch paths without building every host-control baseline from scratch.
Included baseline
- SSH key-only access with root login disabled; default user: ec2-user.
- Host firewall baseline with administrator SSH access.
- auditd, rsyslog, chrony, and AIDE configured during image build.
- Automatic security updates enabled where supported by the operating system.
- OpenSCAP and CIS-oriented validation notes for buyer-side review.
- SELinux-oriented Amazon Linux 2023 baseline where supported.
Best for
- Bastion hosts and jump boxes with key-only administration.
- Application servers that need a documented hardened OS baseline.
- Security-sensitive labs, demos, and production-oriented EC2 workloads.
- Teams standardizing on Amazon Linux 2023 across AWS accounts.
Storage and architecture
Standard Ext4 root volume.
Architecture: x86_64. Recommended instance type: t3.medium.
Security and compliance
This listing provides a hardened baseline and documentation intended to help buyers validate controls in their own AWS accounts. It is not an official CIS-certified image. Buyers remain responsible for organization-specific compliance validation, patch policy, logging retention, and workload configuration.
Related CoreNova listings
- Amazon Linux 2023 Graviton Hardened (ARM64, 64K-Page): https://aws.amazon.com/marketplace/pp/prodview-34gtn5kipritw
- CoreNovaLabs Cloud Forge Hardened App Runtime: https://aws.amazon.com/marketplace/pp/prodview-6hwhb4xi6kk4y
- CoreNovaLabs Cloud Forge Hardened Database AMI: https://aws.amazon.com/marketplace/pp/prodview-dpb2ssuh6ftjs
- Full CoreNova catalog: https://aws.amazon.com/marketplace/seller-profile?id=seller-kbf3ztbtbdc5o
Support
Email: support@corenovacloud.com Web: https://www.corenovacloud.com/
Include AWS Region, AMI ID, EC2 Instance ID, instance type, and steps to reproduce when opening a support request.
Highlights
- Hardened EC2 AMI with SSH key-only access, firewall baseline, auditd, AIDE, and automatic security updates where supported.
- Architecture: x86_64; recommended instance type: t3.medium.
- CIS-oriented OpenSCAP validation notes are included for buyer-side review; not official CIS certification.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Dimension | Cost/hour |
|---|---|
t3.medium Recommended | $0.03 |
t3.micro | $0.03 |
c5.large | $0.03 |
c5.xlarge | $0.03 |
t3a.small | $0.03 |
t3a.micro | $0.03 |
t3.small | $0.03 |
m5.large | $0.03 |
t3.xlarge | $0.03 |
t3a.large | $0.03 |
Vendor refund policy
30-day refund on AWS Marketplace software fees for this product. Email support@corenovacloud.com with your AWS account ID and purchase date. Software fees only; EC2 charges are not refundable by the seller. We reply within 5 business days. Free trial: no software charges during the trial.
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Amazon Linux 2023 Hardened AMI on Amazon Linux 2023 (x86_64, HVM).
Version: v1.2.0
Stack:
- SSH hardening: key-only access, root login disabled (user: ec2-user)
- Firewall baseline (firewalld)
- auditd, rsyslog, chrony enabled
- AIDE integrity database initialized at build time
- Automatic security updates via dnf-automatic
- CIS Benchmark guidance with documented OpenSCAP profile: xccdf_org.ssgproject.content_profile_cis_server_l1
- SSG datastream: ssg-al2023-ds.xml
- SELinux enforcing mode
Storage: Standard Ext4 root volume (single partition, noatime)
Compliance: CIS Benchmark guidance with documented OpenSCAP profile for transparency. Organizations should run their own validation to meet specific regulatory requirements.
Part of the CoreNova Hardened AMI product family.
AMI: ami-0daae1003b0e41133 (us-east-1)
Additional details
Usage instructions
Overview
Amazon Linux 2023 Hardened AMI -- security-hardened EC2 AMI for Amazon Linux 2023 (x86_64). Recommended instance type: t3.medium.
Launch checklist
Step 1 -- Subscribe in AWS Marketplace (Limited availability during review), then Launch in us-east-1.
Step 2 -- Instance type: t3.medium or compatible (see product instance type list).
Step 3 -- Key pair: select your EC2 SSH key. Password login is disabled.
Step 4 -- Security group: allow inbound TCP 22 from your administrator IP only.
First connection
ssh -i your-key.pem ec2-user@YOUR_PUBLIC_IP
Post-launch verify
systemctl is-active auditd chrony rsyslog
sudo systemctl is-active firewalld
sudo sshd -T | grep -E 'permitrootlogin|passwordauthentication' Expected: permitrootlogin no; passwordauthentication no.
Support
Email: support@corenovacloud.com
Web: https://www.corenovacloud.com/
Refund: 30-day refund on Marketplace software fees. EC2 charges not refundable by seller.
Include AWS Region, AMI ID, EC2 Instance ID, instance type, and steps to reproduce.
Resources
Vendor resources
Support
Vendor support
Email: support@corenovacloud.com
Web: https://www.corenovacloud.com/
CoreNova supports launch, SSH access, baseline service checks, Marketplace AMI metadata, and documented hardening behavior. Include AWS Region, AMI ID, EC2 Instance ID, instance type, and steps to reproduce.
Refund: 30-day refund on Marketplace software fees for verified technical issues. AWS infrastructure charges are billed by AWS and are not refundable by the seller.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.