This is a repackaged open source software product wherein additional charges apply for seller hardening and maintenance. Oracle Linux 9 Hardened AMI with SELinux, SSH hardening, fail2ban, CloudWatch Agent, AIDE, chrony, SSM Agent and AWS CLI v2.
This is a repackaged open source software product wherein additional charges apply for seller-applied security hardening, preconfiguration, and maintenance.
This Oracle Linux 9 Hardened AMI delivers a production-ready foundation engineered for organizations that require a stronger security posture and operational readiness from the first boot.
The image incorporates a carefully selected set of security enhancements, including SELinux in enforcing mode, hardened SSH configuration with key-based authentication only and root login disabled, and fail2ban protection against brute-force attacks. File integrity monitoring is provided through AIDE, which is pre-initialized to detect unauthorized changes to critical system components.
To support cloud-native operations, the AMI comes with Amazon CloudWatch Agent pre-installed and pre-configured for metrics and log collection, AWS Systems Manager (SSM) Agent, and AWS CLI v2. Accurate time synchronization is ensured through chrony, while cloud-optimized sysctl parameters improve network and memory behavior under typical EC2 workloads.
A lightweight system status utility (ol9-status) is included to give administrators immediate visibility into the health of key services and security controls.
Together, these technical additions provide a more secure, observable, and operationally prepared Oracle Linux 9 baseline than a standard distribution image -ready for production workloads on Amazon EC2.
Pre-configured Amazon CloudWatch Agent for metrics and log collection out of the box
AIDE (File Integrity Monitoring) initialized for change detection on critical system files
AWS integration ready: SSM Agent and AWS CLI v2 pre-installed
Cloud-optimized sysctl tuning and ol9-status utility for quick system health checks
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier for more details.
You pay by the hour for a hardened Oracle Linux 9.7 image with vendor support. Pricing is usage-based, so you are billed only for the hours each instance runs. Each dimension maps to a specific AWS EC2 instance type, from small burstable options like t2.nano and t3.micro to large memory, compute, storage, and GPU instances. The hourly software rate scales with the size and family of the instance you choose. You select the instance type that fits your workload, and the AWS infrastructure cost is billed separately by AWS.
Top-of-mind questions for buyers
What does one hourly charge cover for a given instance type?
One hourly charge covers the hardened Oracle Linux 9.7 software license plus vendor support for a single running instance of that exact EC2 type. Each dimension maps to one instance size and family. You pay the rate for every hour that instance runs, counted per instance.
Am I charged the software rate when my instance is stopped or paused?
The hourly software rate meters running time only. A stopped or paused instance does not accrue the software charge. Underlying AWS infrastructure fees, such as attached storage, may still apply and are billed separately by AWS.
How do the software charge and the AWS infrastructure charge combine on my bill?
Two charges apply per running hour: the vendor software rate for the chosen instance type, and the separate AWS infrastructure cost for that instance. They bill independently and appear together on your AWS invoice. Choosing a size sets both rates.
www.tiovit.com
Helpful?
Vendor refund policy
The instance can be terminated at anytime to stop incurring charges. No refund available.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Info regarding virtual machines
The operating system does not save any sensitive information for the customers. The customer is responsible for saving any information, sensitive or not.
The data saved on the volumes is not encrypted by default.
All instance authentication must use key pair access, not password-based authentication.
AMIs does not contain passwords, authentication keys, key pairs, security keys, or other credentials.
PasswordAuthentication is set to NO in sshd_config.
The application does not make use of any encryption techniques.
Troubleshooting
Navigate to your Amazon EC2 console and verify that you're in the correct region.
Choose Instance and select your launched instance.
Select the server to display your metadata page and choose the Status checks tab at the bottom of the page to review if your status checks passed or failed.
Or
Select monitor an troubleshoot and select get system log to see the system log or select get instance screenshot to see state of your screen at the current time
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
This is a repackaged open source software product wherein additional charges apply for seller hardening and maintenance. Oracle Linux 10 Hardened AMI with SELinux, SSH hardening, fail2ban, CloudWatch Agent, AIDE, chrony, SSM Agent and AWS CLI v2.
This product has charges associated with it for hardening and maintenance. This Citadel VM is secured using 300+ open source security controls and validated using Citadel Audit.
This is a repackaged software product wherein additional charges apply for a pre-hardened, SI Core STIG Hardened image and seller support. Oracle Linux 9 offers a robust and secure environment, ideal for enterprises seeking high performance and reliability in their cloud applications. With the Oracle Linux 9 AMI, users benefit from enhanced security features, optimized kernel performance, and seamless integration with Oracle Cloud services. Designed for critical applications, Oracle Linux 9 also supports a wide range of workloads, making it an excellent choice for developers and system administrators alike. Leverage Oracle Linux 9 to accelerate deployment times, improve system management, and ensure compliance with industry standards.
This product has charges associated with it for Citadel security hardening, ongoing image maintenance, release evidence, and US-based support. Deploy a PCI-focused Oracle Linux 9 AMI with Citadel security hardening, maintained releases, post-hardening verification, release evidence, and US-based support.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.