This is a repackaged open source software product wherein additional charges apply for seller hardening and maintenance. Rocky Linux 8.7 AMI ready to run on EC2 with SELinux enforcing, hardened SSH, fail2ban, CloudWatch Agent, AIDE, chrony, SSM Agent and AWS CLI v2.
This is a repackaged open source software product wherein additional charges apply for seller hardening, preconfiguration, and maintenance.
This Rocky Linux 8.7 AMI is built for teams that want a clean Rocky Linux start on EC2, without spending the first hours on basic security and AWS tooling. The seller applied a practical security and operations baseline so instances start ready for production-style use.
What is included:
SELinux configured in enforcing mode to strengthen mandatory access control
Hardened SSH baseline with key-based authentication only, root login disabled, and restricted session settings
fail2ban pre-configured to protect SSH against brute-force authentication attempts
Amazon CloudWatch Agent pre-installed and pre-configured for system metrics and log collection
AIDE pre-initialized to help detect unexpected changes on critical system files
chrony configured for reliable time synchronization
AWS Systems Manager (SSM) Agent pre-installed for centralized instance management
AWS CLI v2 pre-installed for everyday AWS command-line operations
Cloud-optimized sysctl tuning for typical EC2 network and memory behavior
Built-in os-status utility for a quick view of services, resources, and security posture
Use this AMI as a solid starting point for application servers, admin hosts, and general Rocky Linux 8.7 workloads on Amazon EC2.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier for more details.
You pay by the hour for this hardened Rocky Linux 8.7 image. Pricing follows the EC2 instance type you run it on. Each dimension names a specific instance size, and the hourly software fee scales with that instance's compute, memory, and capacity class. Smaller instances like t1.micro and m1.small carry a lower hourly rate. Larger instances such as u7in-32tb.224xlarge and p5.48xlarge carry higher rates. You choose one instance type per running copy, and AWS bills the software charge alongside standard EC2 infrastructure costs.
Top-of-mind questions for buyers
What do I get for the hourly software fee on each instance type?
You get a hardened Rocky Linux 8.7 image, pre-secured for production use. The hourly software fee licenses the operating system image itself. It runs on the EC2 instance size you pick, from small types like t1.micro up to large ones like p5.48xlarge. The software fee is separate from EC2 compute costs.
Am I charged the software fee when my instance is stopped?
The hourly software fee meters running time only. A stopped instance stops accruing the software charge. You may still pay standard AWS storage fees for attached volumes while the instance is stopped. Charges resume once you start the instance again.
If I run several copies of this image, how does my bill add up?
Each running instance bills its own hourly software fee based on its instance type. The fees add together across all copies. You choose one instance type per copy. Two copies on different instance types each carry that type's own hourly rate on the same invoice.
www.tiovit.com
Helpful?
Vendor refund policy
The instance can be terminated at anytime to stop incurring charges. No refund available.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Initial hardened release for Rocky Linux 8.7.
This version includes seller-applied technical additions:
SELinux configured in enforcing mode
SSH hardening with key-based authentication only and root login disabled
fail2ban pre-configured for SSH protection
Amazon CloudWatch Agent pre-installed and pre-configured
AIDE file integrity monitoring initialized
chrony, AWS Systems Manager Agent, and AWS CLI v2 included
cloud-optimized sysctl tuning
os-status utility for quick service and security checks
Additional details
Usage instructions
Login using 'rocky' user and ssh public key authentication
Info regarding virtual machines
The operating system does not save any sensitive information for the customers. The customer is responsible for saving any information, sensitive or not.
The data saved on the volumes is not encrypted by default.
All instance authentication must use key pair access, not password-based authentication.
AMIs does not contain passwords, authentication keys, key pairs, security keys, or other credentials.
PasswordAuthentication is set to NO in sshd_config.
The application does not make use of any encryption techniques.
Troubleshooting
Navigate to your Amazon EC2 console and verify that you're in the correct region.
Choose Instance and select your launched instance.
Select the server to display your metadata page and choose the Status checks tab at the bottom of the page to review if your status checks passed or failed.
Or
Select monitor an troubleshoot and select get system log to see the system log or select get instance screenshot to see state of your screen at the current time
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
This is a repackaged open source software product wherein additional charges apply for seller hardening and maintenance. Rocky Linux 8.5 AMI ready to run on EC2 with SELinux enforcing, hardened SSH, fail2ban, CloudWatch Agent, AIDE, chrony, SSM Agent and AWS CLI v2.
This is a repackaged open source software product wherein additional charges apply for seller hardening and maintenance. Rocky Linux 8.9 AMI ready to run on EC2 with SELinux enforcing, hardened SSH, fail2ban, CloudWatch Agent, AIDE, chrony, SSM Agent and AWS CLI v2.
This is a repackaged open source software product wherein additional charges apply for seller hardening and maintenance. Rocky Linux 8.6 AMI ready to run on EC2 with SELinux enforcing, hardened SSH, fail2ban, CloudWatch Agent, AIDE, chrony, SSM Agent and AWS CLI v2.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.