Launch a private Keycloak identity and access management server on AWS with automated first boot, generated administrator credentials, HTTPS access, PostgreSQL, and built in backup and restore helpers. This is a repackaged open source software product wherein additional charges apply for Code Creator automated first boot provisioning, unique administrator and database credential generation, PostgreSQL and Nginx integration, HTTPS configuration, backup and restore tooling, and AWS Marketplace AMI engineering.
Deploy a private and self hosted identity and access management platform inside your AWS account without spending hours installing, configuring, and securing the underlying software stack. Keycloak Identity and Access Management Server by Code Creator provides a ready to launch environment for developers, software companies, platform teams, IT administrators, and organizations that need centralized authentication and access control for applications and services.
The AMI includes Keycloak 26.7.0, PostgreSQL 18.4, Nginx, Docker, and Docker Compose on Ubuntu 26.04 LTS. Automated first boot provisioning generates unique administrator and database credentials, creates an HTTPS certificate for the instance public IP address, initializes the database, configures the permanent Keycloak administrator, and starts the complete application stack. Customers can retrieve their generated login information through SSH and access the Keycloak administration console within minutes.
Keycloak supports Single Sign On, OpenID Connect, OAuth 2, SAML, LDAP, Active Directory, external identity providers, multi factor authentication, OTP, WebAuthn, user federation, role based access control, and customizable login, registration, password recovery, and account pages. Administrators can manage users, groups, roles, clients, permissions, identity providers, and authentication flows from one centralized interface.
The product also includes operating tools that simplify common administration tasks. Customers can check system health, display generated credentials, review logs, restart the application stack, create validated backups, and restore compatible backups using included commands. PostgreSQL and Keycloak internal service ports remain private within the Docker network configuration, while customer data, administrator credentials, identity information, and backups remain inside the customer AWS account.
No domain name or IAM instance role is required for the validated quick start deployment. Customers can launch the AMI with a public IP address and begin configuring authentication services immediately. The initial HTTPS certificate is self signed and generated for the public IP address detected during first boot. Customers planning a long term production deployment should use a stable network address and a properly managed TLS configuration.
Code Creator charges apply for the automated deployment workflow, first boot provisioning, unique credential generation, PostgreSQL and Nginx integration, HTTPS configuration, operational tools, validated backup and restore functionality, and AWS Marketplace ready AMI engineering. Keycloak remains open source software, with official documentation and community resources available from the Keycloak project.
Highlights
Launch a ready to use Keycloak 26.7.0 server in minutes. Automated first boot generates unique administrator and database credentials, creates an HTTPS certificate for the instance public IP, initializes PostgreSQL, and starts the complete application stack automatically
Centralize authentication and authorization with standards based Single Sign On using OpenID Connect, OAuth 2.0, and SAML 2.0. Create realms, users, groups, roles, clients, authentication flows, and self-service account experiences from the Keycloak administration console
Connect existing identity sources with LDAP, Active Directory, and external identity providers. The AMI includes private PostgreSQL networking, Nginx HTTPS access, status and log helpers, safe restart commands, and validated backup and restore tools
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Try this product free for 5 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
KeyCloak: Identity and Access Management Server by Code Creator
You pay by the hour based on the Amazon EC2 instance size you pick to run this pre-built Keycloak server. The options split into two families. The t3 instances (medium, large, xlarge, 2xlarge) are general-purpose sizes for lighter workloads. The m7i instances (large, 2xlarge, 4xlarge, 8xlarge, 12xlarge) scale up to handle more demand. Within each family, hourly cost rises as you move to larger sizes with more compute and memory. You choose the size that fits your workload and pay only for hours used.
Top-of-mind questions for buyers
What do the t3 and m7i instance labels map to in concrete terms?
Each label is an Amazon EC2 instance type you run the Keycloak server on. The size name sets the virtual CPUs and memory allocated. t3 sizes are general-purpose for lighter use. m7i sizes offer more compute and memory. You pick one size and pay per hour it runs.
Am I charged when the instance is stopped or paused?
Hourly software charges apply only while the instance runs. A stopped or paused instance stops accruing those hourly charges. Underlying AWS storage fees may still apply to attached volumes even when the instance is off. You pay only for the hours the instance is active.
How does cost change if I move to a larger instance size?
The hourly rate rises as you move to a size with more compute and memory. Changing size is a manual choice you make when launching or relaunching the instance. Billing then meters the new size's hourly rate. You are not charged for both sizes at once.
www.codecreator.com
Helpful?
Vendor refund policy
You may cancel the AWS Marketplace subscription at any time. No contracts. Software charges already incurred are not refundable.
Request a private offer to receive a custom quote.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
This enhanced release updates Keycloak to version 26.7.0 on Ubuntu 26.04 LTS with PostgreSQL 18.4 and Nginx 1.30.4. It adds faster automated first boot, unique administrator and database credentials, HTTPS setup, improved network isolation, customer helper commands, and validated backup and restore tools. Fresh launch, browser login, reboot recovery, administrator access, and runtime health were fully validated.
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
This Authentik server is a comprehensive, open source Identity and Access Management (IAM) solution designed to simplify the process of managing authentication, authorization, and user lifecycle management. This is a repackaged open source software product wherein additional charges apply for Code Creator EC2 ready Authentik packaging, preconfigured identity and access management deployment, Ubuntu integration, and AWS Marketplace AMI engineering.
Self hosted secrets management server powered by Infisical for API keys, passwords, database credentials, environment variables, and application secrets. Runs inside your AWS account with automated first boot, unique per instance security secrets, trusted HTTPS, PostgreSQL, Redis, and simple operations helpers. This is a repackaged open source software product wherein additional charges apply for Code Creator automated first boot provisioning, unique per instance security secret generation, PostgreSQL and Redis integration, trusted HTTPS configuration, secure administrator onboarding, backup and operational tooling, and AWS Marketplace AMI engineering.
Deploy a private AI competitor research server on AWS. Schedule recurring web scans, detect meaningful changes, and export executive reports - all powered by Amazon Bedrock inside your own account.
Launch a ready to use Rancher Kubernetes management server on Ubuntu 24.04 with K3s, Helm, cert manager, first boot URL generation, customer login notes, and browser based access for managing and evaluating Kubernetes clusters. This is a repackaged open source software product wherein additional charges apply for Code Creator integration of Rancher Manager with K3s, Helm and cert manager, automated first boot configuration, public IP based access setup, administrator credential initialization, helper tooling, and AWS Marketplace AMI engineering.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.