Sold by: cloudimg
Deployed on AWS
Free Trial
AWS Free Tier
This product has charges associated with it for seller support. Self-hosted password management on AWS without cloud dependency. Pre-configured KeePass AMI with AES-256 encryption and24/7 expert support for IT teams needing local credential storage.
Overview
This is a repackaged open source software product wherein additional charges apply for cloudimg support services.
Self-Hosted Password Management on AWS with Expert Support
The cloudimg KeePass AMI delivers a pre-configured, locally-hosted password manager for IT administrators and security engineers who need encrypted credential storage without cloud dependency. Ideal for teams running Windows Server workloads on AWS who require compliance-ready password management with guaranteed support.
Why Choose the cloudimg KeePass AMI Over Self-Deployment
Deploying KeePass on Windows Server yourself means installing the application, configuring AES-256 database encryption, setting up Auto-Type sequences, enabling clipboard security, hardening RDP access, and troubleshooting plugin compatibility - all without expert guidance. The cloudimg KeePass AMI eliminates this setup burden:
- KeePass pre-installed with latest stable version and security settings applied
- AES-256 encrypted database created and ready for master password configuration
- Auto-Type configured for automatic credential entry into applications
- Clipboard security enabled with automatic clearing to prevent password exposure
- Plugin directory accessible for extensions like KeePassRPC (Firefox/Chrome browser integration)
- RDP access configured on Port 3389 for immediate remote management
- 24/7 expert support with guaranteed24-hour response SLA for any configuration issues
Concrete Use Case: DevOps Team Credential Management
A 20-50 person DevOps team stores shared infrastructure credentials - AWS access keys, database passwords, API tokens, and SSH key passphrases - in a single encrypted KDBX database file. The KeePass AMI runs on a private subnet EC2 instance, accessible only via RDP through a bastion host. Team members connect to retrieve credentials using Auto-Type, eliminating plaintext password sharing over email or chat. The local database file is backed up to Amazon S3 using scheduled scripts, providing versioned recovery without exposing credentials to third-party cloud password services.
Key Security Features
- AES-256 Encryption - database protected with AES-256, with Twofish and ChaCha20 as alternative options
- PBKDF2-HMAC-SHA512Key Derivation - master password processed through computationally expensive key derivation to resist brute force
- Key File Authentication - optional key file provides a second authentication factor beyond the master password
- Two-Factor Authentication - support for hardware keys and OTP devices
- Secure Desktop Mode - protects master password entry against keyloggers
- Process Memory Protection - sensitive data encrypted in RAM
- Automatic Clipboard Clearing - credentials removed from clipboard after configurable timeout
- Database Locking - automatic lock after inactivity period
Password Management Capabilities
- Hierarchical organization with groups and subgroups
- Password generator with customizable length, character sets, and pattern generation
- Password history tracking and expiration date alerts
- Custom fields for storing API keys, certificates, and sensitive notes
- File attachments for secure document storage
- URL association for quick website access
- Search, filter, and tag functionality
Integration and Compatibility
- Browser Integration - KeePassRPC plugin enables autofill in Chrome and Firefox
- Import Support - import credentials from LastPass, 1Password, Bitwarden, and CSV exports from other managers
- Cloud Sync - optional sync via Dropbox, Google Drive, OneDrive, or Amazon S3 using third-party plugins
- Network Sharing - store KDBX database on network shares for team access
- Export Formats - export to CSV, XML, HTML, and other formats for migration
Platform Details
Available on Windows Server 2019 and Windows Server 2022. Port 3389 configured for RDP access. KeePass is free and open-source under GPL license. All password data stored locally on your EC2 instance - no data transmitted to external servers.
24/7 Support Included
Every subscription includes 24/7 technical support with a guaranteed 24-hour response SLA. Support covers KeePass installation verification, database creation, master password setup, Auto-Type configuration, plugin installation (including browser integration), backup configuration to Amazon S3, security hardening guidance, and troubleshooting. Contact support via email at any time.
About cloudimg
cloudimg specializes in publishing pre-configured AMIs on AWS Marketplace with professional support. Each AMI is built to reduce deployment time and provide ongoing expert assistance so your team can focus on operations rather than software configuration.
Trademarks
This software listing is packaged by cloudimg. The respective trademarks mentioned in the offering are owned by the respective companies, and their use does not imply any affiliation or endorsement.
Highlights
- Deploy in minutes, not hours - KeePass arrives pre-installed and pre-configured with AES-256 encrypted database, Auto-Type sequences, clipboard security, and plugin directory ready. Skip manual installation, encryption setup, and Windows Server configuration. Connect via RDP on Port 3389 and set your master password to begin managing credentials immediately.
- 24/7 Expert Support with 24-Hour Response Guarantee - every subscription includes round-the-clock technical assistance covering database creation, master password recovery guidance, Auto-Type troubleshooting, plugin installation (including browser integration for Chrome and Firefox via KeePassRPC), backup configuration to Amazon S3, and security hardening. Email support at any time with guaranteed response within 24 hours.
- Self-Hosted Credential Security Without Cloud Dependency - all passwords stored locally on your EC2 instance in encrypted KDBX format. No data transmitted to external servers. Import from LastPass, 1Password, or Bitwarden. Optional sync via S3, Dropbox, or network shares for team access. Ideal for IT teams requiring compliance-ready password management in air-gapped or private subnet environments.
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
Win 2022
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free for 7 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier for more details.
Dimension | Description | Cost/hour |
|---|---|---|
t3.large Recommended | t3.large instance type | $0.10 |
t2.micro | t2.micro instance type | $0.06 |
t3.micro | t3.micro instance type | $0.06 |
r6idn.metal | r6idn.metal instance type | $0.28 |
r5b.4xlarge | r5b.4xlarge instance type | $0.28 |
r6id.4xlarge | r6id.4xlarge instance type | $0.28 |
i2.xlarge | i2.xlarge instance type | $0.15 |
r5n.24xlarge | r5n.24xlarge instance type | $0.28 |
r5d.2xlarge | r5d.2xlarge instance type | $0.28 |
c6a.16xlarge | c6a.16xlarge instance type | $0.28 |
Vendor refund policy
Refunds available on request.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Latest Windows security updates applied (patch cycle 21-04-2026). Previous version: 'KeePass on Windows Server 2019 - 01-09-2025'.
Additional details
Usage instructions
Please visit the User Guide for this product on the cloudimg website for full deployment and configuration instructions.
Resources
Vendor resources
Support
Vendor support
24/7 Technical Support
Every cloudimg KeePass AMI subscription includes round-the-clock technical support with a guaranteed 24-hour response SLA.
Contact: support@cloudimg.co.uk
Support Covers:
- KeePass installation verification and version updates
- Database creation and master password setup
- Auto-Type configuration and troubleshooting
- Plugin installation including browser integration
- Backup configuration and restore assistance
- Security hardening guidance and best practices
- RDP access troubleshooting (Port 3389)
- Windows Server configuration questions
Getting Started After Launch:
- Launch the AMI on your chosen EC2 instance (Windows Server 2019 or 2022)
- Ensure your security group allows inbound traffic on Port 3389 (RDP)
- Connect via Remote Desktop using your Windows RDP client
- Open KeePass - the application is pre-installed on the desktop
- Set your master password when prompted to secure your database
- Begin adding credentials or import from existing password managers
Prerequisites: An AWS account, a security group allowing Port 3389, and a Windows RDP client.
Refunds: For refund requests or billing questions, contact support@cloudimg.co.uk .
Enjoyed our software on AWS Marketplace? Share your experience with the community by leaving a review at the bottom of this page.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
This product has charges associated with it for seller support. Deploy Oracle Database 19c Standard Edition on Windows Server in minutes with production-ready ENA networking up to 25 Gbps and24x7 cloudimg engineer support.
This product has charges associated with it for seller support. Oracle Database 19c Standard Edition AMI pre-configured on enterprise Linux with BYOL licensing. Deploy production-ready Oracle on AWS with 24/7 expert support from cloudimg.
This product has charges associated with it for seller support. Pre-configured RStudio IDE on Windows Server with 24/7 cloudimg support. Deploy a production-ready R data science environment on EC2 in minutes.
This product has charges associated with it for seller support. Migrate from CentOS 8 EOL to Alma Linux 8 in under 60 seconds with zero licensing fees. 1:1 RHEL 8 compatible, AWS-optimized, backed by 24/7 support with guaranteed 24hr response SLA.
This product has charges associated with it for seller support. Pre-configured Jenkins CI/CD server on Windows for .NET and DevOps teams. Launch in minutes with guaranteed 24-hour response support from cloudimg.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.