A small log gateway for your instances. Fluent Bit 5.1.3 on Ubuntu 24.04 takes JSON logs over HTTPS, buffers them on disk and writes them to a local file, with guides for sending them on to CloudWatch Logs or S3.
Collect logs through one gateway. This image runs Fluent Bit 5.1.3 with an HTTPS JSON ingest, a bounded filesystem buffer and a local file destination, with documented steps for forwarding to CloudWatch Logs or S3.
Launch the approved version on t3.medium with at least 16 GiB encrypted root storage and at least 2 GiB RAM. Connect with AWS Systems Manager as ubuntu or restrict SSH to your administrative CIDR. First boot creates TLS material and the instance config; nothing sensitive is baked into the image. Fluent Bit listens on loopback only for HTTPS ingest. CloudWatch and S3 outputs remain optional customer IAM after launch. Keep credentials out of recordings and tickets.
The standard software fee is described in the AWS Marketplace offer terms. EC2, EBS and data-transfer charges are billed separately. See the offer terms for applicable billing promotions.
After launch, wait for cloud-init to finish, then follow the bundled README for configuration, backup and day-2 operations.
Reach it from other machines: To accept logs from other hosts, put a proxy you control in front of Fluent Bit, or change its listen address to the instance's private IP and allow only your own network in the security group. Do not bind it to 0.0.0.0 or open it to the internet.
This is a repackaged open source software product wherein additional charges apply for independent AWS packaging, validation, maintenance and setup documentation. Treasure Data / Chronosphere authors publish Fluent Bit under Apache-2.0; Software Sushi supplies the AMI recipe, pinned official Ubuntu amd64 package binary, first-boot TLS, loopback-only ingest defaults, bounded filesystem buffer, local file destination, and setup documentation without claiming upstream endorsement.
Highlights
Pinned Fluent Bit 5.1.3 official Ubuntu amd64 package with provenance receipts.
First-boot TLS, loopback HTTPS ingest, bounded disk buffer and local file destination.
Bundled configuration, backup and day-2 operations documentation.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Try this product free for 5 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
You pay a single usage-based rate for this software. Billing is tied to each running instance-hour on a t3.medium EC2 instance. There is only one pricing dimension, so cost scales with how long the instance runs. If you run multiple instances or keep one running longer, the total goes up proportionally. AWS charges you separately for EC2 compute, EBS storage, and data transfer. These infrastructure costs are not part of the software rate shown in the table.
Top-of-mind questions for buyers
What do I get when I run this on the t3.medium instance?
You get Fluent Bit 5.1.3 on an Ubuntu 24.04 amd64 build. It includes HTTPS log ingest on loopback, a TLS certificate created on first boot, a bounded filesystem buffer, a local file output, and a monitoring API. No certificates or keys ship in the image.
Am I charged for the software when the instance is stopped?
Charges apply per running instance-hour. When the instance is fully stopped, software charges stop accruing. However, AWS may still bill you separately for EBS storage attached to a stopped instance. The software license meters running time only.
What costs are separate from the software hourly rate?
AWS bills EC2 compute, EBS storage, and data transfer separately from the software rate. If you route logs to external destinations like cloud log services or object storage, those services may charge their own usage fees. Always check the listing for current terms.
docs.softwaresushi.com
Helpful?
Vendor refund policy
We offer a full refund of software charges for the first 48 hours billing starts if the product does not perform as described. To request a refund, email info@softwaresushi.com with your EC2 instance ID and a description of the issue. AWS infrastructure costs (EC2, EBS, data transfer) are not eligible for refund by us.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Fluent Bit 5.1.3 on Ubuntu 24.04 LTS for t3.medium. Includes pinned official package binary, first-boot TLS, loopback HTTPS ingest, bounded filesystem buffer, and local file destination. Connect with Session Manager as ubuntu and run bash /opt/sushi/docs/demo.sh after first boot.
Additional details
Usage instructions
Launch t3.medium (16 GiB or larger encrypted gp3, IMDSv2) with an instance profile that has AmazonSSMManagedInstanceCore and outbound HTTPS. No inbound rules are needed. Copy-paste launch kit (role, security group, run-instances, CloudFormation): https://docs.softwaresushi.com/launch-kit/
Connect: aws ssm start-session --target <instance-id>. After cloud-init finishes, run: sudo -iu ubuntu bash /opt/sushi/docs/demo.sh (expect a final line ending in DEMO_PASSED).
Use it: Send JSON with a POST to port 9880 (path /ingest.local) over HTTPS, trusting /usr/local/share/sushi/fluent-bit/cert.pem. Records are written to /var/lib/fluent-bit/out/accepted.log. Health check: path /health.
Secrets and access: No password is generated: the ingest uses TLS but not client authentication, so keep it private. To send from your computer, forward port 9880: aws ssm start-session --target <instance-id> --document-name AWS-StartPortForwardingSession --parameters '{"portNumber":["9880"],"localPortNumber":["9880"]}'
Reach it from another host: Fluent Bit listens on loopback. Either put a proxy you control in front of it, or change its listen address to the instance's private IP and allow only your own network in the security group. Do not bind it to 0.0.0.0 or open it to the internet.
Guide: https://docs.softwaresushi.com/fluent-bit/ . Support: info@softwaresushi.com
Software Sushi provides AMI packaging and setup guidance. Contact info@softwaresushi.com for installation questions. Support coverage requires a separate agreement. This offer does not include Fluent Bit project support.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Collect, clean and route logs on your own instance. Vector 0.58.0 accepts JSON over HTTPS with a password, redacts sensitive fields with a VRL program, buffers to disk and writes to a local file. An S3 sink example is included. Built-in walkthrough on Ubuntu 24.04.
A ready OpenTelemetry Collector gateway for traces, metrics and logs. otelcol 0.162.0 on Ubuntu 24.04 receives OTLP over TLS, writes to a local file and is built to take your own exporters. Includes a walkthrough that sends a test span.
A Caddy v2.11.7 reverse proxy on Ubuntu 24.04 with HTTPS from its own internal CA, a password-protected sample route and a guide to proxy your own application. Public domain certificates need a few documented changes.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.