Production-ready Grafana with Prometheus, full root access, and security hardening - a self-hosted observability stack for teams needing complete control over monitoring and dashboards on AWS.
This fully managed Grafana with Prometheus solution delivers a production-ready observability stack on AWS, built on Ubuntu 24.04 LTS. Every instance is pre-configured with both Grafana and Prometheus, security best practices, and automated operations.
Key Features
Integrated Observability Stack
Grafana and Prometheus pre-configured and connected. Create dashboards, set up alerts, and visualize metrics immediately after setup.
Automated Setup
On first login, an interactive setup script configures both Grafana and Prometheus, sets up data source connections, and applies firewall rules - all within minutes.
Security Hardened
UFW firewall pre-configured, HTTPS-ready, authentication enabled by default, and latest security patches applied.
Extensible Platform
Add Node Exporter, cAdvisor, Loki for logs, Tempo for traces, and hundreds of Grafana plugins. Build a complete observability platform.
Use Cases
Infrastructure monitoring dashboards and alerting
Application performance monitoring with custom metrics
Kubernetes cluster observability
Business metrics dashboards and KPI tracking
SLA monitoring and incident management
Multi-team shared observability platform
Getting Started
Launch the AMI from AWS Marketplace on your preferred instance type
SSH into your instance and follow the interactive setup wizard
Access Grafana dashboard, configure data sources, and start building visualizations
Support
Managed and supported by Perimattic, a cloud infrastructure company with 13+ years of experience serving global clients. We offer free setup assistance, custom integrations, infrastructure consulting, and 24/7 support.
Highlights
Integrated Grafana + Prometheus Stack: Both tools pre-configured and connected with unlimited dashboards, data sources, and alerting rules without per-user or per-dashboard pricing.
Extensible Observability Platform: Add Node Exporter, Loki for logs, Tempo for traces, and hundreds of Grafana plugins to build a complete monitoring solution.
24/7 Expert Support by Perimattic: 13+ years of cloud infrastructure expertise with free setup assistance, dashboard configuration, and dedicated support at aws-support@perimattic.com.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
You pay by the hour based on the EC2 instance size you choose to run this managed observability stack. The eight options fall into three instance families. The t2 and t3 families offer medium, large, and xlarge sizes, while the m5 family offers large and xlarge sizes. Larger sizes provide more compute and memory, so your hourly rate scales with the instance you select. Billing is usage-based and runs through your AWS account, so charges appear on your existing AWS invoice with no separate contract.
Top-of-mind questions for buyers
What do I get for each hourly instance rate — just infrastructure or a managed service too?
Each hourly rate covers a running EC2 instance plus the managed observability stack on it. The vendor provisions the servers, installs SSL, and configures Grafana dashboards and Prometheus monitoring. They also handle backups, updates, and security patches, so the fee is not raw compute alone.
Am I charged when the instance is stopped or powered off?
Hourly software charges meter running time, so a fully powered-off instance does not accrue them. A stopped instance may still incur underlying AWS storage fees for its attached volumes. To stop all charges for a workload, terminate the instance rather than leaving it stopped.
What is the difference between the t2, t3, and m5 instance families I can choose?
All three run the same managed observability stack; they differ in the underlying compute and memory profile. The t2 and t3 families are burstable general-purpose sizes offered in medium, large, and xlarge. The m5 family is fixed-performance general-purpose, offered in large and xlarge. Your hourly rate follows the size you pick.
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Unified Monitoring Stack: Preconfigured environment with Prometheus, Grafana, and Apache, deployed via Docker Compose for seamless observability and visualization.
Guided First-Boot Script: Interactive setup script for domain mapping, SSL configuration, and initial deployment, including input validation, DNS verification, and failsafe retry logic.
Automated SSL/TLS Provisioning: Integrated with Let's Encrypt and Certbot to automatically issue and configure SSL certificates for secure HTTPS access.
Secure Configuration Management: Centralized .env file securely stores domain, IP address, port configuration, and Grafana admin credentials for easy management and future updates.
Failsafe Initialization: Built-in failsafe mechanism ensures setup completion by automatically retrying interrupted or failed installation steps for both Prometheus and Grafana.
Optimized Container Architecture: Docker Compose-based deployment ensures portability, isolation, and performance optimization for production-ready monitoring.
Apache Virtual Host Automation: Automatically configures Apache virtual hosts and updates domain details for HTTP and HTTPS access for both services.
Custom Domain Support: Simplified domain configuration process with DNS propagation checks before SSL issuance.
Preconfigured Grafana Data Source: Grafana is ready to connect to Prometheus out-of-the-box, minimizing manual configuration.
Production-Ready Monitoring: Tuned Prometheus and Grafana setup is ideal for monitoring infrastructure, Docker, Kubernetes, or standalone environments with minimal overhead.
Secure Access Options: Easily extendable to enable Basic Authentication or other access controls for Grafana and Prometheus dashboards.
Additional details
Usage instructions
Launch an Instance
From AWS Marketplace, click Continue to Subscribe and then Continue to Configuration.
Choose the Recommended Instance Type
Select t2.medium or larger for optimal performance.
Configure Security Group
Allow inbound traffic on ports 22 (SSH), 80 (HTTP), and 443 (HTTPS).
Connect to the Instance
ssh -i <your-key.pem> ubuntu@<public-ip>
First-Boot Setup
On first boot, the failsafe script automatically runs and performs:
Prompts to optionally map a custom domain for Grafana and/or Prometheus.
Validates that the domain's DNS A record points to your instance's public IP.
Configures Apache and prepares the environment for both services.
Configure DNS (if using a domain)
Add an A record in your DNS pointing to the instance's public IP.
The script automatically verifies DNS propagation using multiple global resolvers.
Automatic SSL Setup
Enter your email address when prompted for SSL notifications.
Certbot automatically issues and installs Let's Encrypt SSL certificates once DNS is validated.
Apache is reconfigured to serve both Grafana and Prometheus securely over HTTPS.
Start Monitoring Stack
Both Prometheus and Grafana containers start automatically using Docker Compose.
You can manually check or restart the containers:
cd /opt/app
docker compose ps
docker compose restart
Access Dashboards
Prometheus:
If no domain: http://<public-ip>:9090
If domain with SSL: https://<your-domain>
Grafana:
If no domain: http://<public-ip>:3000
If domain with SSL: https://<your-domain>
Login to Grafana
Use the admin credentials stored in the environment file:
/opt/app/.env
Default username: root
Password: (auto-generated and saved securely in .env)
Environment File
Centralized configuration for both Prometheus and Grafana:
/opt/app/.env
/opt/app/promethesu/.env
Includes: domain, IP addresses, ports, and Grafana admin credentials.
Thank you for subscribing. Your instance is ready to go!
Need Support or Customization?
Whether you're facing setup issues or need custom features, Perimattic's expert team is here to help:
We offer:
Free setup assistance
Custom development & integrations
Infrastructure consulting
Automation & AI solutions
With 13+ years of experience serving global clients, we ensure your deployment runs smoothly and scales with your needs.
What We Help With:
Initial setup and configuration assistance (free)
Troubleshooting connectivity, performance, and backup issues
Custom development and integrations
Infrastructure consulting and architecture review
Migration planning from other solutions
Automation solutions and scaling guidance
Instance Sizing Guidance:
t2.medium or t3.medium: Development environments, small applications
m5.large: Production workloads with moderate traffic
m5.xlarge: High-traffic production deployments and larger datasets
For workload-specific sizing recommendations, contact our team for a free consultation.
Refunds and Issues:
If you experience any issues or need to request a refund, contact us at aws-support@perimattic.com and we will respond promptly.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Production-ready Grafana with Prometheus, full root access, and security hardening - a self-hosted observability stack for teams needing complete control over monitoring and dashboards on AWS.
Perimattic delivers DevOps and Platform Engineering as an embedded partner, using ManageStacks automation, GitOps, and Kubernetes to accelerate AWS software delivery.
Production-ready ClickHouse with full root access, automated backups, and security hardening - a high-performance columnar database for real-time analytics on AWS.
Production-ready Neo4j with full root access, automated backups, and security hardening - a self-hosted graph database for knowledge graphs, recommendation engines, and network analysis on AWS.
Production-ready Neo4j with full root access, automated backups, and security hardening - a self-hosted graph database for knowledge graphs, recommendation engines, and network analysis on AWS.
Production-ready Neo4j with full root access, automated backups, and security hardening - a self-hosted graph database for knowledge graphs, recommendation engines, and network analysis on AWS.
Production-ready ClickHouse with full root access, automated backups, and security hardening - a high-performance columnar database for real-time analytics on AWS.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.