This Nemu Hardened Computing AMI provides a DISA STIG-hardened (updated monthly) RedHat Enterprise Linux 8 image for use in building Federally-compliant AWS environments.
Highlights
Fully compliant with STIG guidelines
Separate log and home filesystems provide enhanced security
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier for more details.
You pay by the hour for the EC2 instance type you run this hardened Red Hat Enterprise Linux 8 STIG image on. Each dimension maps to a specific AWS instance size, so pricing scales with the compute, memory, and specialized hardware you choose. Options span general-purpose, compute-optimized, memory-optimized, storage-optimized, accelerated, GPU, and bare-metal families, plus high-memory instances. Smaller instances bill at lower hourly rates than larger ones in the same family. You select the instance that fits your workload, and the software charge applies on top of standard AWS infrastructure costs.
Top-of-mind questions for buyers
What does the hourly rate for each instance type actually pay for?
You pay for a preconfigured Red Hat Enterprise Linux 8 image hardened to STIG standards, running on the EC2 instance size you pick. The rate covers the software license only. Standard AWS charges for the underlying compute, storage, and network apply separately on your bill.
Am I charged when my instance is stopped or powered off?
The software charge meters running instance-hours. A fully stopped instance stops accruing the hourly software fee. You may still pay standard AWS storage costs for attached volumes while stopped, but those come from AWS, not this listing.
Can I run this hardened image on more than one instance size at once?
Yes. Each running instance bills under the dimension matching its type. If you run several instances across different families, each accrues its own hourly software charge. The charges add together and appear on one invoice alongside your AWS infrastructure costs.
nemu.us
Helpful?
Vendor refund policy
Refunds are not provided for this product.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Fully compliant with DISA STIG guidelines with monthly updates
Filesystem Isolation
Separate log and home filesystems for enhanced security isolation
Operating System Base
RedHat Enterprise Linux 8 as the base operating system
Federal Compliance
Designed for building Federally-compliant AWS environments
Regular Security Updates
Monthly updates to maintain current STIG hardening standards
ARM64 Architecture Support
Built for ARM64 EC2 instances and supports AWS Graviton instance families and ARM64-native application stacks
Security Hardening Configuration
Security-focused configuration across authentication, account policy, privilege boundaries, audit logging, networking, services, kernel settings, and file permissions
Pre and Post-Hardening Assessment
Includes pre-hardening and post-hardening assessment results, remediation history, and release-specific evidence reports for exact image releases
Current Security Updates
Current Red Hat Enterprise Linux package and security updates applied during controlled image build process
AWS Systems Manager Integration
Supports AWS Systems Manager Session Manager for administrative access as recommended deployment method
Security Hardening Standard Compliance
Image hardened according to Level 2 CIS Benchmark developed through consensus-based process and accepted by government, business, industry, and academia.
Regulatory Compliance Support
Supports compliance with PCI DSS, FedRAMP, DoD Cloud Computing SRG, FISMA, and select NIST publications.
Pre-configured Security Controls
Includes hardened account and local policies, firewall configuration, and computer-based and user-based administrative templates aligned with industry best practices.
Monthly Security Updates
Patched monthly in alignment with software vendor updates to maintain alignment with latest security standards.
Configuration Assessment Reporting
Includes CIS-CAT Pro assessment reports documenting baseline configuration, hardening changes, package modifications, and exceptions applied to the image.
Hybrid workloads have been simplified and daily operations save significant time and effort
Reviewed on Oct 15, 2026
Review provided by PeerSpot
What is our primary use case?
I am using Red Hat Enterprise Linux (RHEL) on a document management system, services server lines, and to build these applications.
Regarding lifecycle practices in the cloud, I am using two applications on-premises and a few are on Docker containers.
How has it helped my organization?
Red Hat Enterprise Linux (RHEL) saves me around 60% on time. With regard to downtime, I can lower downtime by about two to three minutes.
Regarding pain points, Red Hat Enterprise Linux (RHEL) does not help me solve any specific issues.
What is most valuable?
The biggest advantage of Red Hat Enterprise Linux (RHEL) is that it is easily available and easily manageable. The support cases are more readily used and the online local support is available.
With regard to the management part, when it comes to provisioning and patching, I can do patching and management on my own. I see that there is no difference between on-premises and cloud solutions; both are similar and it depends on conditions and the way the structure is organized. This is why I have no issues with on-premises or hybrid cloud deployments.
I find that integration with Red Hat Enterprise Linux (RHEL) is easy, as I am using it with Oracle.
What needs improvement?
Regarding disadvantages in Red Hat Enterprise Linux (RHEL), the certification cost is a concern for me. The problem with the certification is that its price is high, and it needs to be minimal for countries like Pakistan.
About the knowledge base that Red Hat offers, I feel it needs to improve session offerings more. This is especially important for junior beginners.
For how long have I used the solution?
I have around three to four years of experience using Red Hat Enterprise Linux (RHEL).
What do I think about the scalability of the solution?
Regarding scalability, I am satisfied. The services are easily available and scalable as per the need.
How are customer service and support?
My experience with Red Hat support is that it is very helpful. If I had to rate support from zero to ten points, I would give it a nine because everything is solved.
How was the initial setup?
Regarding deployment strategy, I find it quite simple. Regarding the upgrades and migration process from on-premises to the cloud, I have to first create a setup on a test machine, then upgrade, and after that, go live.
What was our ROI?
Regarding return on investment, I see value for money with Red Hat Enterprise Linux (RHEL). Red Hat Enterprise Linux (RHEL) saves me almost 60%. The saving I speak of is on both time and money.
What's my experience with pricing, setup cost, and licensing?
When choosing Red Hat Enterprise Linux (RHEL), our security requirement was that I am using it on IBM Power servers, which offered a bundle price. That is why I opted for Red Hat Enterprise Linux (RHEL). Regarding the price, I think the license is a little bit expensive nowadays, but I have opted for six years in a bundle offer. That is why I am using it at a cheaper price.
Which other solutions did I evaluate?
In comparing Red Hat Enterprise Linux (RHEL) to other Linux distributions, I find Red Hat Enterprise Linux (RHEL) to be more stable than compared to others in terms of performance, storage, and security. Although other distributors are more secure, as part of my choice, I choose Red Hat Enterprise Linux (RHEL).
What other advice do I have?
When I have it on the cloud, I work with a local provider rather than a native Red Hat Cloud or cloud providers like AWS, Azure, or GCP. I have not tried Image Builder of Red Hat Enterprise Linux (RHEL) at this time. I would give Red Hat Enterprise Linux (RHEL) a rating of nine points.
Kandregula Sathvik
Granular access controls have strengthened security testing and streamlined user administration
Reviewed on Sep 24, 2026
Review provided by PeerSpot
What is our primary use case?
I mostly use Red Hat Enterprise Linux (RHEL) for security purposes, conducting security testing, cyber security testing, and general administration purposes, including maintaining accounts.
What is most valuable?
Red Hat Enterprise Linux (RHEL) offers extensive customization options that I can tailor to my specific needs. I love the customizability and adaptability.
The knowledge base offered by Red Hat Enterprise Linux (RHEL) is quite comprehensive and vast. I search through it and use AI to resolve any queries I have.
The most important security feature in Red Hat Enterprise Linux (RHEL) is the excellent administration policy regarding which user can access which file and what type of permissions I can assign. I appreciate this as a local IAM system.
The IAM feature is most valuable for us because we have around 200 to 300 users, and it can be difficult to track which people have what type of privileges. This feature provides a very neat and detailed view of the privileges that people are assigned.
What needs improvement?
I would like to see improvements in the CLI, making it somewhat easier instead of the complicated commands that are currently used. Keeping it simple and easy to remember would be beneficial.
For how long have I used the solution?
I have been working with Red Hat Enterprise Linux (RHEL) for three years.
What do I think about the stability of the solution?
Red Hat Enterprise Linux (RHEL) is very stable.
What do I think about the scalability of the solution?
Regarding scalability, I find Red Hat Enterprise Linux (RHEL) to be quite scalable and does not require much time for scaling.
The only concern is the costing when it comes to cloud instances.
How are customer service and support?
I have never escalated any questions to the technical support or customer service teams regarding Red Hat Enterprise Linux (RHEL).
Which solution did I use previously and why did I switch?
I have not used any different product for operating systems before.
How was the initial setup?
The initial setup process for Red Hat Enterprise Linux (RHEL) was straightforward.
What about the implementation team?
I completed the setup and deployment myself.
What was our ROI?
The business value of Red Hat Enterprise Linux (RHEL) is quite high. It provides excellent availability and never crashes. The machine performs reliably when I need it, resulting in very few downtimes.
What's my experience with pricing, setup cost, and licensing?
Regarding the pricing aspect of Red Hat Enterprise Linux (RHEL), I mostly use free resources and have not procured any license. I prefer to use open-source options and maintain my own set of rules.
With the open-source nature of Red Hat Enterprise Linux (RHEL), the measurable benefits I have seen are primarily cost benefits. It is highly customizable and saves considerable time because I do not need to explain what I want to anyone; I simply conduct research and implement those features into my instances.
Which other solutions did I evaluate?
I chose Red Hat Enterprise Linux (RHEL) because I am familiar with it and receive good updates and security updates.
What other advice do I have?
I have not worked with LEAP or Red Hat Insights yet.
I have mostly worked with Red Hat Enterprise Linux Image Builder and System Roles. System Roles have been helpful for me as I started using them recently. I previously limited some resources in my systems by using only a specific percentage of available hardware resources and reducing bloatware, which involves resource controlling.
I have never tried Red Hat Enterprise Linux (RHEL) in a hybrid environment. I mostly connect to some instances in the cloud through SSH but have never used hybrid solutions.
Until now, Red Hat Enterprise Linux (RHEL) has not helped me solve specific pain points, except for using the command line terminal and assigning many different permissions to accomplish one task.
The controlled updates and patches save a lot for me regarding Red Hat Enterprise Linux (RHEL).
From a features perspective, there are no missing features that I would see included in Red Hat Enterprise Linux (RHEL) in the future.
I obtained Red Hat Enterprise Linux (RHEL) directly from Red Hat. My overall review rating for this product is 9.
UmairKhan2
Platform has improved network administration but still needs simpler setup and better training
Reviewed on Sep 23, 2026
Review provided by PeerSpot
What is our primary use case?
I primarily use Red Hat Enterprise Linux (RHEL) for network administration.
What is most valuable?
I wonder if you tried either Leapp or Red Hat Insights. I don't know exactly, but I don't think we went that deep into it because there were some specific sets of instructions we used to run every time.
Red Hat Enterprise Linux (RHEL) helped to mitigate downtime and lower risks, and I would say it's above average.
Sometimes there are new rollouts or features, or if I am exploring something new in support, I basically face problems where it's difficult for me to educate newcomers, interns, or new entrants to get accustomed to these things because it's an entirely new environment and new platform compared to what we have been using here in our country and in our organizations. If I am using Microsoft for certain things, it's mostly graphic based, but in Red Hat Enterprise Linux (RHEL), it's mostly very command-line specific.
What needs improvement?
I think that if sometimes there are certain solutions where the support team with some specific technical personnel could remotely assist using TeamViewer or something similar to solve specific issues, then I think it could be much faster.
I think the commercial rollout of Red Hat Enterprise Linux (RHEL) could improve because this is a very specific kind of product that isn't commercial in nature. If there is some kind of integration with commercial customers and it is used more frequently in everyday life, along with improved graphic interfaces, capacity building, training platforms, or webinars, then I think we can extend the market, have more users, and receive more accurate feature-based feedback from them.
For how long have I used the solution?
I used Red Hat Enterprise Linux (RHEL) for almost two years or longer.
How are customer service and support?
Technical support for Red Hat Enterprise Linux (RHEL) was definitely good. Sometimes if we were stuck and needed troubleshooting or were trying to perform some function that wasn't happening, it was satisfactory. I can rate their technical support at least eight.
Which solution did I use previously and why did I switch?
I was using Red Hat Enterprise Linux (RHEL) personally for my own use. I am no longer using Red Hat Enterprise Linux (RHEL). I switched from Red Hat Enterprise Linux (RHEL) almost one year ago.
How was the initial setup?
The initial setup of Red Hat Enterprise Linux (RHEL) was initially complex.
Sometimes there are new rollouts or features, or if I am exploring something new in support, I basically face problems where it's difficult for me to educate newcomers, interns, or new entrants to get accustomed to these things because it's an entirely new environment and new platform compared to what we have been using here in our country and in our organizations.
What's my experience with pricing, setup cost, and licensing?
I would like to understand what my experience was with the pricing of Red Hat Enterprise Linux (RHEL) and whether I find it reasonable and competitive.
Which other solutions did I evaluate?
I think we purchased Red Hat Enterprise Linux (RHEL) from a third party, from some other vendor.
What other advice do I have?
I have multiple experiences working in this field. Initially, I was a network administrator, focusing on networking, mainly in routing and switching. I worked with internet service providers, so I have experience with a NOC and service provider solutions in that regard, particularly dealing with Red Hat Enterprise Linux (RHEL) for network administration.
Niek Beernink
RHEL has strengthened security and standardization in a disconnected environment
Reviewed on Aug 09, 2026
Review provided by PeerSpot
What is our primary use case?
I use Red Hat Enterprise Linux (RHEL) for servers as well as workstations.
Our site has around 3,000 workstations that our developers are building our software on. For servers (~1000), we are using it for self-hosting tools required for software development and testing.
Furthermore, we are also working on implementing a process for using Image Builder to build a Standard Operating Environment image deploy that to virtual machines. Then we use RHEL System Roles and a lot of custom ansible roles to manage the state of the machines.
What is most valuable?
Red Hat Enterprise Linux (RHEL) offers enterprise security and really well-written documentation.
The most important security feature in the Red Hat ecosystem is the errata data, combined with Satellite. It tells you exactly which component is vulnerable, which versions of Red Hat Enterprise Linux (RHEL) are affected, and overall the documentation provided with errata is easily readable for various audiences (for example a summary for management as well as more technical for engineers).
Red Hat Enterprise Linux (RHEL) has helped to mitigate downtime and lower risk by providing kpatch. These are kernel patches, which allow us to apply security patches to a running kernel. We can then plan a full reboot outside of office hours.
The Red Hat Offline Knowledge base offered by Red Hat Enterprise Linux (RHEL) is really helpful. In a disconnected environment it allows you to search all documentation and errata up to a given date without having to reach out for the internet to check the details.
What needs improvement?
Sometimes the support for Red Hat Enterprise Linux (RHEL) could be better. Since we're in a disconnected environment, it's sometimes really hard to share explicit details about the issue we're running into and we keep getting asked for an SOS report, which we cannot supply due to security concerns.
For how long have I used the solution?
I've been working with RHEL for seven years.
What other advice do I have?
Look at the interactive labs provided by Red Hat, they give a great hands-on experience and show off the benefits would advise others looking into using Red Hat Enterprise Linux (RHEL) to investigate the training that is available.
Prathamesh Misal
Standardized servers have improved uptime and simplified managing critical workloads
Reviewed on Jul 30, 2026
Review provided by PeerSpot
What is our primary use case?
Red Hat Enterprise Linux (RHEL) serves as the operating system for our enterprise infrastructure. We use it to host applications, Kubernetes and OpenShift clusters, and other critical services that we perform day-to-day operations on.
One project I relied heavily on Red Hat Enterprise Linux (RHEL) was deploying a Red Hat OpenShift cluster. I used RHEL to prepare the bastion host, configure networking, DNS, HAProxy, storage, and install the required packages. After deployment, I also performed troubleshooting and day-to-day operations such as system updates, log analysis, and resolving service issues, as RHEL provided a stable and secure platform throughout the project.
We also use Red Hat Enterprise Linux (RHEL) as the standard operating system across our servers because of its reliability and enterprise support. It integrates well with tools such as OpenShift, Ansible, and VMware, making it easier to manage and maintain our infrastructure consistently.
What is most valuable?
The features that stand out the most in Red Hat Enterprise Linux (RHEL) are its stability, security, and long-term support. I also value SELinux for built-in security, DNF or Yum for package management, systemd for service management, and the performance and reliability it provides for enterprise workloads. Another strong point is the seamless integration with Red Hat tools such as OpenShift, Ansible, and Satellite, which makes infrastructure management much easier.
The feature I rely on the most in Red Hat Enterprise Linux (RHEL) is its stability. Since we manage production servers and OpenShift environments, having an operating system that runs reliably with minimal downtime is very important. It allows us to focus on deployments and troubleshooting without worrying about OS-level issues, making day-to-day administration much more efficient.
I would also mention the excellent documentation and large enterprise community around Red Hat Enterprise Linux (RHEL). It makes troubleshooting and learning much easier, and because it is widely used in enterprise environments, finding best practices and support resources is straightforward.
Red Hat Enterprise Linux (RHEL) has improved the stability and reliability of our infrastructure. Since adopting it as our standard operating system, we have experienced fewer system-related issues, better uptime, and a consistent environment for deploying applications and OpenShift clusters. It has also simplified server administration and troubleshooting, helping the team resolve issues more quickly and maintain a secure, stable platform.
We did not track formal KPIs, but we did notice practical improvements since adopting Red Hat Enterprise Linux (RHEL). For example, server provisioning that used to take a few hours became much faster because of standardized RHEL configurations and automation. Troubleshooting time also reduced since the environment was consistent across servers, and we have experienced very few OS-related outages. Overall, it has helped improve operational efficiency and system reliability.
What needs improvement?
Red Hat Enterprise Linux (RHEL) is a very mature platform, but I think it could improve in a few areas. The subscription and licensing model can be a bit complex for new users, and some enterprise features have a steep learning curve. Simplifying subscription management and providing more built-in automation and monitoring tools would make the overall experience even better.
While the documentation is very comprehensive, it can sometimes be overwhelming for beginners. More practical, real-world examples and troubleshooting guides would be helpful. Apart from that, Red Hat Enterprise Linux (RHEL) is a very reliable and well-supported enterprise operating system.
For how long have I used the solution?
I have been working in this field for the last 1.8 years.
What do I think about the stability of the solution?
Red Hat Enterprise Linux (RHEL) has been very stable in my experience. We use it to run production servers and support OpenShift environments, and it has consistently provided reliable performance with minimal operating system issues. With regular updates and proper maintenance, we have experienced very few unexpected outages, making it a dependable platform for enterprise workflows.
What do I think about the scalability of the solution?
Red Hat Enterprise Linux (RHEL) scales well for enterprise environments. In my experience, it has supported everything from individual servers to larger infrastructure running OpenShift clusters without any issues. It handles increasing workloads reliably, and its integration with enterprise management and automation tools makes it easier to manage systems as the environment grows.
How are customer service and support?
Since I did not interact directly with Red Hat support very often because most issues were handled internally by our team, I can say that whenever we referred to Red Hat's knowledge base and official documentation, they were comprehensive and very helpful for troubleshooting.
Which solution did I use previously and why did I switch?
Red Hat Enterprise Linux (RHEL) has been the standard operating system for our enterprise infrastructure since I joined my organization. I have not worked with a different enterprise Linux distribution in this environment, so there was not a migration or switch during my time there.
How was the initial setup?
We manage our Red Hat Enterprise Linux (RHEL) systems using standard Red Hat tools such as DNF or Yum for package management and system updates, along with automation where needed. For provisioning, we follow standardized server configurations to ensure consistency across environments. Overall, I am very satisfied with the management experience because patching is straightforward, the tools are reliable, and maintaining multiple servers is efficient.
What about the implementation team?
I have not used Red Hat Enterprise Linux (RHEL) Image Builder extensively in production. However, I have used Red Hat system roles along with Ansible to standardize servers, configurations, and automate common administration tasks. They were helpful in maintaining consistency across multiple RHEL servers, reducing manual configuration, and saving time during deployments.
What was our ROI?
We have seen a return on investment mainly through improved operational efficiency rather than reducing headcount. Red Hat Enterprise Linux (RHEL) stability and standardized management have reduced the time spent on troubleshooting and routine maintenance. For example, server provisioning and patching are more streamlined, and we have experienced fewer OS-related issues. Overall, it has helped save time, improve uptime, and allow the team to focus on higher-value tasks instead of resolving operating system issues.
What's my experience with pricing, setup cost, and licensing?
From my perspective, the licensing of Red Hat Enterprise Linux (RHEL) is well-suited for enterprise environments because it includes access to updates, security patches, and Red Hat support. The initial subscription cost is higher than community Linux distributions, but the stability, long-term support, and enterprise features provide good value overall. I think the pricing is justified for organizations that require a reliable production-grade operating system.
Which other solutions did I evaluate?
I have used other enterprise Linux distributions extensively in a production environment, so I cannot make a direct comparison based on hands-on experience. However, from my experience with Red Hat Enterprise Linux (RHEL), its enterprise support, long-term stability, SELinux, and integration tools such as OpenShift and Red Hat Insights provide strong business value.
What other advice do I have?
I rate Red Hat Enterprise Linux (RHEL) a nine out of ten. It is a highly stable, secure, and enterprise-grade operating system with excellent long-term support and seamless integration with tools such as OpenShift and Ansible.
The only reason I would not give Red Hat Enterprise Linux (RHEL) a ten is that the subscription model can be a bit complex, and the learning curve is steeper for beginners. Overall, it is one of the best enterprise Linux platforms.
From my experience, the AI capabilities around Red Hat Enterprise Linux (RHEL) are more focused on assisting system administration rather than replacing it. Features such as Red Hat Insights use predictive analytics to identify security risks, configuration issues, and potential vulnerabilities before they become a problem. This helps improve governance by keeping systems compliant and makes security management more proactive while still allowing administrators to review and control any recommended actions.
In my experience, the recommendations from Red Hat Insights are generally accurate and reliable. They help identify configuration issues, security vulnerabilities, and performance recommendations based on Red Hat's knowledge base. We still review the recommendations before applying them in production, but overall, they have been useful for proactive maintenance and reducing potential issues.
I would recommend Red Hat Enterprise Linux (RHEL) to organizations that need a secure, stable, and enterprise-grade operating system for production workloads. It is especially valuable if you are using technologies such as OpenShift, Ansible, or other Red Hat products because of the strong integration. My advice is to plan your subscription and licensing requirements in advance, follow Red Hat best practices, and make good use of the official documentation and knowledge base to get the most out of the platform. I rate this product nine out of ten overall.