Production-ready SonarQube with full root access, automated configuration, and security hardening - a self-hosted code quality and security analysis platform on AWS.
This fully managed SonarQube solution delivers a production-ready code quality and security analysis platform on AWS, built on Ubuntu 24.04 LTS. Every instance is pre-configured with security best practices, optimized settings, and automated operations.
Key Features
Complete Code Quality Platform
SonarQube pre-configured with quality profiles for 30+ programming languages. Detect bugs, code smells, security vulnerabilities, and technical debt across your codebase.
Automated Setup
On first login, an interactive setup script configures SonarQube, sets up the database, and applies firewall rules - all within minutes.
Security Hardened
UFW firewall pre-configured, HTTPS-ready, authentication enabled by default, and latest security patches applied.
CI/CD Integration Ready
Integrate with Jenkins, GitLab CI, GitHub Actions, Azure DevOps, and Bitbucket Pipelines. Enforce quality gates before merging code.
Use Cases
Continuous code quality inspection in CI/CD pipelines
Security vulnerability detection (OWASP Top 10, CWE)
Technical debt tracking and reduction
Code review automation and quality gate enforcement
Compliance-driven code analysis (MISRA, CERT)
Multi-project portfolio quality management
Getting Started
Launch the AMI from AWS Marketplace on your preferred instance type
SSH into your instance and follow the interactive setup wizard
Integrate SonarQube with your CI/CD pipeline and start analyzing code
Support
Managed and supported by Perimattic, a cloud infrastructure company with 13+ years of experience serving global clients. We offer free setup assistance, custom integrations, infrastructure consulting, and 24/7 support.
Highlights
Self-Hosted Code Quality Platform: Full root access to configure quality profiles, security rules, and plugins for 30+ languages without per-user pricing or data residency concerns.
CI/CD Integration Ready: Pre-configured for Jenkins, GitLab CI, GitHub Actions, and Azure DevOps. Enforce quality gates and catch vulnerabilities before merging code.
24/7 Expert Support by Perimattic: 13+ years of cloud infrastructure expertise with free setup assistance, pipeline integration, and dedicated support at aws-support@perimattic.com.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier for more details.
You pay by the hour for the EC2 instance type that runs your managed SonarQube code quality platform. Each dimension maps to a specific AWS instance size across families like general-purpose (m, t), compute-optimized (c), memory-optimized (r, x), storage (i, d), and accelerated (g, p) types. Pricing scales with the compute, memory, and storage capacity of the instance you choose. Larger instances within a family cost more per hour. You pick the instance that fits your workload, and billing follows actual running hours with no upfront commitment.
Top-of-mind questions for buyers
What does the hourly charge cover beyond the SonarQube software itself?
The hourly rate pays for a managed instance that the vendor provisions, patches, backs up, and monitors. Each instance runs on its own dedicated hardware with automatic TLS certificates and daily backups. Underlying AWS infrastructure charges apply separately through your AWS account.
Am I charged when the instance is stopped or powered off?
Hourly software charges apply to running instance-hours. When the instance is fully stopped, software metering pauses. Underlying AWS storage for the stopped instance may still accrue through your own AWS account, but the software licence meters active running time only.
How do I choose among the many instance-type options, and can I change later?
Each dimension maps to one EC2 instance type with set compute, memory, and storage. Pick the size that matches your code analysis load. You can move to a different instance type as your workload grows, since you pay only for running hours with no upfront commitment.
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Security and maintenance refresh.
Rebuilt from a current Ubuntu 24.04 base image and fully patched, addressing
the operating-system vulnerabilities reported by the AWS Marketplace
security scan.
Built by an automated, reproducible EC2 Image Builder pipeline rather than
by hand, so future security refreshes ship on a monthly schedule.
Hardened: SSH password authentication and direct root login are disabled,
SSH host keys are generated per instance on first boot, and no credentials,
shell history or build-host identity is present in the image.
Container runtime consolidated onto the Ubuntu-maintained Docker packages
so it is patched automatically, and Docker Compose is now installed
explicitly rather than relied upon.
Additional details
Usage instructions
1.Launch an Instance
From AWS Marketplace, select Continue to Subscribe, then Continue to Configuration, and launch the AMI into your preferred VPC and subnet.
2.Choose the Recommended Instance Type
Select t2.medium or larger for smooth SonarQube operation.
SonarQube and PostgreSQL require adequate CPU and RAM.
For CI/CD or teams of 5 or more developers, consider t3.medium or t3.large.
3.Configure Security Group
Allow inbound access on these ports:
22 - SSH access
80 - Required temporarily for SSL validation
443 - Secure HTTPS access to SonarQube
These ports are required for first-boot automation, certificate generation, and dashboard access.
4.Connect to the Instance
SSH into your server:
ssh -i <your-key.pem> ubuntu@<public-ip>
The automated first-boot setup will begin immediately after login.
We offer:
Free setup assistance
Custom development & integrations
Infrastructure consulting
Automation & AI solutions
With 13+ years of experience serving global clients, we ensure your deployment runs smoothly and scales with your needs.
What We Help With:
Initial setup and configuration assistance (free)
Troubleshooting connectivity, performance, and backup issues
Custom development and integrations
Infrastructure consulting and architecture review
Migration planning from other solutions
Automation solutions and scaling guidance
Instance Sizing Guidance:
t2.medium or t3.medium: Development environments, small applications
m5.large: Production workloads with moderate traffic
m5.xlarge: High-traffic production deployments and larger datasets
For workload-specific sizing recommendations, contact our team for a free consultation.
Refunds and Issues:
If you experience any issues or need to request a refund, contact us at aws-support@perimattic.com and we will respond promptly.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Production-ready SonarQube with full root access, automated configuration, and security hardening - a self-hosted code quality and security analysis platform on AWS.
Self-hosted low-code internal tools builder 3.20.255 (community edition, AGPL-3.0) with PostgreSQL 17 on Ubuntu 24.04: HTTPS, a generated administrator and sign-up closed. Paid-licence features are not included.
Production-ready Portainer with full root access, Docker management UI, and security hardening - simplify container orchestration with a visual management platform on AWS.
Production-ready Apache Superset with full root access, security hardening, and automated setup - a modern open-source alternative to Tableau and QuickSight for data visualization on AWS.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.