This is a repackaged open source software product with additional charges for the value-added configuration. Hardened Rocky Linux 9 AMI aligned with CIS Level 1 recommendations (OpenSCAP score of 77.25%, reflecting a solid security baseline). Security report can be generated on demand by running OpenSCAP.
This hardened Rocky Linux 9 AMI is designed for teams that want a secure, production-ready base without spending time on initial configuration. It includes a practical security baseline aligned with CIS Level 1 recommendations (OpenSCAP score of 77.25%, reflecting a solid security baseline). The OpenSCAP security report can be generated at any time by running the OpenSCAP evaluation tool included in the image.SELinux is set to enforcing mode, SSH is locked down to key-based authentication only with root login disabled, and fail2ban is pre-configured to protect against brute-force attempts. The image also comes with Amazon CloudWatch Agent pre-installed and configured for metrics and logs, AIDE initialized for file integrity monitoring, chrony for accurate time synchronization, AWS Systems Manager Agent, and AWS CLI v2. Cloud-optimized sysctl tuning is applied for better network and memory behavior on EC2, and the os-status utility provides a quick overview of system health and security posture.Ideal for workloads that need a reliable, hardened Rocky Linux 9 foundation with reduced setup time
Highlights
Security-hardened baseline aligned with CIS Level 1 recommendations (OpenSCAP score of 77.25%, reflecting a solid security baseline). Security report can be generated on demand with OpenSCAP
Pre-configured Amazon CloudWatch Agent for metrics and log collection out of the box
AIDE file integrity monitoring, SSM Agent, AWS CLI v2, chrony, and os-status utility included
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier for more details.
You pay by the hour for the instance type you run. Each dimension maps to one AWS EC2 instance size, and the software price scales with the compute capacity you choose. Smaller instances like general-purpose or burstable types cost less per hour than large memory-, compute-, storage-, or accelerator-optimized types. You can pick from hundreds of options across EC2 families, including bare-metal sizes. Pricing is tied purely to runtime, so your cost depends on which instance you select and how many hours it runs.
Top-of-mind questions for buyers
What do I actually get when I run one of these instance types?
You get a hardened Rocky Linux 9 virtual machine image running on the EC2 instance size you pick. Each dimension maps to one EC2 instance type, defining its CPU, memory, and storage. The listing includes an OpenSCAP security report with the hardened image.
Am I charged when my instance is stopped or paused?
The software price meters running hours only. When you stop an instance, the hourly software charge stops. Underlying AWS storage fees may still apply for the stopped volume, but the software license bills active runtime. Your cost resumes when you start the instance again.
How does my bill change if I move to a larger instance type?
Each instance type carries its own hourly software rate tied to its compute capacity. Moving to a larger size changes your hourly rate to that type's rate. There is no commitment, so switching takes effect for the hours you run the new instance.
www.tiovit.com
Helpful?
Vendor refund policy
The instance can be terminated at anytime to stop incurring charges. No refund available.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Hardened Rocky Linux 9 AMI with SELinux enforcing, SSH key-only access, root login disabled, fail2ban protection, pre-configured Amazon CloudWatch Agent, AIDE file integrity monitoring, chrony, SSM Agent, AWS CLI v2, cloud-optimized sysctl tuning, and os-status utility. Security baseline aligned with CIS recommendations. Suitable for production workloads on EC2. Additional charges may apply for the value-added configuration and support.
Additional details
Usage instructions
Once the instance is running, connect to it using a Secure Shell (SSH) client with the configured SSH key. The default username is 'cloud-user'
Info regarding virtual machines
The operating system does not save any sensitive information for the customers. The customer is responsible for saving any information, sensitive or not.
The data saved on the volumes is not encrypted by default.
All instance authentication must use key pair access, not password-based authentication.
AMIs does not contain passwords, authentication keys, key pairs, security keys, or other credentials.
PasswordAuthentication is set to NO in sshd_config.
The application does not make use of any encryption techniques.
Troubleshooting
Navigate to your Amazon EC2 console and verify that you're in the correct region.
Choose Instance and select your launched instance.
Select the server to display your metadata page and choose the Status checks tab at the bottom of the page to review if your status checks passed or failed.
Or
Select monitor an troubleshoot and select get system log to see the system log or select get instance screenshot to see state of your screen at the current time
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
This is a repackaged open source software product with additional charges for the value-added configuration. Hardened Rocky Linux 8.10 AMI aligned with CIS Level 1 recommendations (OpenSCAP score of 77.00%, reflecting a solid security baseline). Security report can be generated on demand by running OpenSCAP.
This is a repackaged open source software product wherein additional charges apply for seller hardening and maintenance. Rocky Linux 9.8 AMI ready to run on EC2 with SELinux enforcing, hardened SSH, fail2ban, CloudWatch Agent, AIDE, chrony, SSM Agent and AWS CLI v2.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.