Sold by: Meyi Cloud US
Deployed on AWS
AWS Free Tier
Meyi Portico gives your team secure, time-bound access to servers, databases and web apps from one browser portal, with approval workflows, session recording and a full audit trail.
Overview
Shared SSH keys, standing admin access, and database passwords passed around in chat are some of the most common causes of security incidents and failed audits. Meyi Portico replaces them with a single, browser-based access portal that runs inside your own AWS account, so your infrastructure credentials never leave your environment.
With Meyi Portico, users connect to Linux servers over SSH, Windows servers over RDP, internal web applications, and databases including PostgreSQL, MySQL, MariaDB, Microsoft SQL Server, Oracle, MongoDB and Redis, all from a web browser. There is no VPN to manage and no client software to install. Administrators organize users into teams, define access scopes, and grant permissions that start and expire on a schedule, enforcing least privilege without slowing engineers down.
When someone needs access they don't already have, they raise a request in the portal. Approvers are notified through Slack, Microsoft Teams or WhatsApp, approve with a time limit, and access is revoked automatically when the window closes. Every session is logged, and sessions can be recorded for playback, giving security and compliance teams a complete record of who accessed which resource, when, and what they did.
Meyi Portico connects to your existing identity provider through SAML or OIDC single sign-on, stores SSH keys in a built-in vault, and supports a custom domain with SSL and your own branding. A live dashboard shows active sessions, pending requests and resource usage at a glance. For EC2-based hosts, Portico can also stop idle instances automatically to help control cost.
Meyi Portico is built and supported by Meyi Cloud, an AWS Advanced Tier Services Partner with the AWS Cloud Operations Services Competency and the AWS Small and Medium Business Services Competency.
Typical use cases:
- Replacing bastion hosts and shared credentials with audited, browser-based access
- Giving contractors and vendors temporary, approval-based access
- Meeting audit requirements for ISO 27001, SOC 2 and similar frameworks with session logs and recordings
- Centralizing database access for developers without sharing database passwords
Highlights
- One portal for every resource: connect to Linux hosts over SSH, Windows hosts over RDP, and databases including PostgreSQL, MySQL, MariaDB, SQL Server, Oracle, MongoDB and Redis, straight from the browser. No VPN, no shared passwords, no client software to install.
- Just-in-time, least-privilege access: users request access to a host, database or scope, approvers grant it for a set time window, and access expires automatically. Permissions can be assigned to individuals or teams, with Slack, Microsoft Teams and WhatsApp notifications so requests never sit waiting.
- Just-in-time, least-privilege access: users request access to a host, database or scope, approvers grant it for a set time window, and access expires automatically. Permissions can be assigned to individuals or teams, with Slack, Microsoft Teams and WhatsApp notifications so requests never sit waiting.
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
Ubuntu 26.04 LTS
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
This product is available free of charge. Free subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier for more details.
Vendor refund policy
Meyi Portico is billed hourly through AWS Marketplace for the time your instance runs, so charges stop when you stop or terminate the instance. Hourly usage is generally non-refundable. If you believe you were charged in error or experienced a service issue, contact us within 30 days of the charge at support@meyicloud.com with your AWS account ID and instance ID. Approved refunds are processed through AWS Marketplace.
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Version 1.1
Additional details
Usage instructions
- Launch the instance
- Launch the AMI on the recommended instance type (c5.large) or larger, with at least 30 GB of gp3 storage. Add more storage if you plan to keep session recordings.
- Place it in a subnet with outbound internet access. The first boot downloads the application containers.
- Use the seller-recommended security group (HTTPS 443, HTTP 80, TCP 4443). Restrict the source CIDR to your corporate network or VPN range where possible.
- Attach an Elastic IP if you plan to use a custom domain, so the address does not change after a stop/start.
- Wait for provisioning
- First-boot setup runs automatically and takes about 10 to 15 minutes.
- To check progress, connect with AWS Systems Manager Session Manager or SSH and run: sudo tail -f /var/log/meyi-provision.log
- Setup is complete when the log shows "Provisioning Completed Successfully".
- Complete the setup portal
- Open https://<instance-public-IP>/ in a browser. The instance starts with a self-signed certificate, so your browser will show a warning; continue to the site.
- Follow the setup portal to create the administrator account and enter your organization details.
- Sign in to Meyi Portico with the administrator account.
- Configure a custom domain and SSL (recommended)
- Create a DNS A record for your domain (for example portico.example.com) pointing to the instance Elastic IP.
- In Meyi Portico, open Organization > Account & domain and enter the domain. A free Let's Encrypt certificate is issued and renewed automatically. Port 80 must stay open for certificate validation.
- Add users and resources
- Security & access > SSO configuration: connect your identity provider using SAML or OIDC (optional).
- People > Users and Teams: invite users and group them into teams.
- Access > Hosts: add Linux (SSH) and Windows (RDP) hosts and databases. The Portico instance must be able to reach these resources on their network ports.
- Security & access > Permissions and Scopes: grant access to users or teams, optionally with start and end times.
- Organization > Notifications: connect Slack, Microsoft Teams or WhatsApp for access request alerts.
- Security recommendations
- Do not open any ports other than 443, 80 and 4443 to the internet.
- Enable EBS encryption and take regular EBS snapshots or AWS Backup of the instance volume.
- Require IMDSv2 on the instance.
- Prefer AWS Systems Manager Session Manager over opening SSH port 22.
- Upgrades
- Platform > Updates shows available versions and applies them from the web console.
Documentation and support: support@meyicloud.com
Support
Vendor support
Meyi Cloud provides support for Meyi Portico by email and through our support portal.
Email: support@meyicloud.com Website: https://www.meyicloud.com/
Support hours: Monday to Friday, 9:00 AM to 6:00 PM IST Initial response time: within 1 business day; within 4 business hours for Pro production-down issues
Support includes help with deployment and initial configuration, connecting hosts and databases, SSO setup, licensing and plan questions, troubleshooting, and access to product updates. Onboarding assistance and guided setup sessions are available on request.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Meyi Portico is an enterprise-grade Privileged Access Management (PAM) and SSH Gateway that provides secure, zero-trust access to servers, databases, cloud resources, and web applications. It uses short-lived SSH certificates, centralised access control, session recording, and full audit logging. MEYI Portico integrates with Google, Azure AD, and SAML identity providers
Meyi Portico is an enterprise-grade Privileged Access Management (PAM) and SSH Gateway that provides secure, zero-trust access to servers, databases, cloud resources, and web applications. It uses short-lived SSH certificates, centralised access control, session recording, and full audit logging. MEYI Portico integrates with Google, Azure AD, and SAML identity providers
DataSunrise Database & Data Security, Data Masking and Compliance
EvolveAccess shows who can reach your sensitive data and what they did with it, across databases, file shares, cloud storage and directories. It runs entirely in your own AWS account.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.