Sold by: EASYCLOUD
Deployed on AWS
This is a repackaged open source software product wherein additional charges apply for a pre-hardened, AWS-optimized image with verification reports and maintenance. This AMI delivers Rocky Linux 10.2 ARM64 hardened and tuned for EC2 by Easycloud-with security scan reports and SBOM.
Overview
This is a repackaged open source software product wherein additional charges apply for a pre-hardened, AWS-optimized image with verifiable evidence and maintenance. Based on Rocky Linux 10.2 ARM64, this AMI is hardened, tuned for Amazon EC2 workloads, and equipped with a complete evidence pack and Software Bill of Materials (SBOM).
Value-Added Features
System Footprint & Reliability Optimization:
-
Minimal Footprint: Built on a minimal OS installation to reduce the attack surface and remove unnecessary packages.
-
Storage Layout: Configured with a streamlined 10 GB root (/) partition layout to minimize disk footprint while ensuring core system operation.
-
Validation Testing: Functional verification conducted on clean AMI launches through multi-round integration testing, verifying complete software lifecycle operations with SELinux enforcing.
AWS Network & Kernel Tuning:
-
Network Stack: TCP BBR congestion control with fair queueing, increased connection backlogs, buffer adjustments, and MTU probing enabled.
-
System Tuning: Red Hat tuned daemon active with a custom cloud profile, custom transparent hugepages (madvise), and modified memory/EBS writeback parameters.
-
EC2 Integration: Configured with NVMe I/O timeouts, Amazon Time Sync (chrony), IRQ balance daemon, and size-capped persistent journald logging.
Operational Tools
- Preinstalled Tools: AWS SSM Session Manager enabled, CloudWatch Agent installed (disabled by default).
Security:
-
Security Hardening: SELinux enforcing with the targeted policy, ICMP redirects disabled, unused kernel modules blocked, and a shorter SSH login window.
-
Fully Patched at Release: Zero packages with a pending update at build time, verified. The complete CVE scan ships inside the image.
-
Comprehensive Evidence Pack: Every AMI includes an evidence pack located under /opt/optimization-report/:
- Tuning_Parameters.txt: Every performance tuning parameter, each shown against the Rocky Linux default, with how to undo it.
- Security_Parameters.txt: SELinux and every security setting, each shown against the Rocky Linux default, with how to undo it.
- sbom.spdx.json: Software Bill of Materials (SBOM) in SPDX format generated from the RPM database.
- cve_scan.txt / cve_scan_full.txt.gz: Vulnerability scan reports categorizing CVEs by upstream patch availability.
- key_files.sha256: SHA-256 checksums of the key configuration files described in the reports, so the delivered state can be verified.
- README.txt: Index file detailing artifact contents, administrative operational guidelines, and configuration defaults.
Maintenance:
- Maintenance Specifications: Rebuilt and updated bi-weekly to monthly incorporating upstream Rocky Linux 10.2 security updates, updated artifact documentation per release, and administrative documentation.
About Rocky Linux 10 ARM64
-
Rocky Linux 10 Foundation: A 100% bug-for-bug compatible, enterprise-grade derivative of Red Hat Enterprise Linux (RHEL). Serving as the premier downstream alternative to traditional CentOS, it provides a clean, bloat-free, and secure foundation with exceptional ecosystem compatibility for AlmaLinux and other RHEL-based workloads.
-
Next-Generation Enterprise Platform: Rebuilt from RHEL 10 sources, Rocky Linux 10 carries the newest enterprise kernel and toolchain of the Red Hat lineage while preserving the binary compatibility the ecosystem depends on. Applications certified for RHEL 10 run without modification, giving teams a forward-looking base with a long maintenance horizon.
-
Ideal Foundation for Modern Cloud Infrastructure: Rocky Linux 10's binary-compatible RHEL foundation and minimal ARM64 image eliminate package sprawl and version conflicts, ensuring every resource is dedicated to your workloads from day one. It is the ideal stable base for web and proxy tiers (Nginx, HAProxy, Varnish Cache), relational and in-memory data stores (MySQL, PostgreSQL, Redis), and ARM64-optimized application runtimes (Python, Node.js, Go, Docker, Kubernetes). Its long-term support horizon makes it a trusted platform for enterprise messaging (Apache Kafka, RabbitMQ), CI/CD and observability stacks (Jenkins, SonarQube, Grafana, Elasticsearch), Java application servers (Apache Tomcat), and service mesh and secrets management tooling (Consul, HashiCorp Vault), giving your infrastructure a rock-solid, RHEL-certified backbone that scales without compromise.
Highlights
- Hardened Base: Pre-configured with SELinux enforcing, network kernel parameter hardening, kernel module blocklists, and SSH hardening out of the box.
- Comprehensive Security Reports & SBOM: Includes verifiable configuration reports and a complete Software Bill of Materials (SBOM), enabling instant verification of the delivered settings and rapid vulnerability assessments out-of-the-box.
- AWS Performance Tuning & Regular Updates: Optimised for EC2 with TCP BBR and Red Hat tuned cloud profiles, updated bi-weekly to monthly with upstream security patches.
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (Arm) Amazon Machine Image (AMI)
Latest version
Operating system
OtherLinux Rocky Linux 10.2
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
- ...
Dimension | Cost/hour |
|---|---|
t4g.medium Recommended | $0.04 |
c8gb.metal-48xl | $0.68 |
r6g.metal | $0.68 |
m7gd.medium | $0.04 |
c7g.4xlarge | $0.29 |
c6gn.16xlarge | $0.68 |
x8g.medium | $0.04 |
r8gn.metal-24xl | $0.68 |
m8gb.medium | $0.04 |
i8ge.metal-24xl | $0.68 |
Dimensions summary
You pay by the hour for a hardened Rocky Linux 10 image on ARM64 instances. Pricing is not tiered. Instead, each line matches a specific AWS EC2 ARM64 instance type, and your hourly software rate depends on which instance you launch. The rate scales with instance size, so smaller types like t4g.nano or medium sizes cost less per hour than large multi-xlarge or metal types. You pick the instance that fits your compute, memory, or storage needs. The software charge is added on top of the normal AWS infrastructure cost, and you are billed only for hours used.
Top-of-mind questions for buyers
The rate pays for a hardened Rocky Linux 10 ARM64 image. Hardening follows recognized security benchmarks to reduce the system's attack surface, configure firewalls, and apply access controls. You run this image on your chosen EC2 ARM64 instance. The software charge is separate from the AWS infrastructure cost.
The software fee meters running instance-hours. When an instance is fully stopped, no hourly software charge accrues. You may still pay AWS for attached storage while the instance sits stopped. Billing resumes once you start the instance again, charged by the hour for the matching instance type.
Yes. Each instance type carries its own hourly software rate. If you launch a larger type, you pay that type's rate for the hours it runs. There is no automatic tier upgrade; you choose the instance, and the rate follows your selection.
www.easyclouds.io
Helpful?
Vendor refund policy
No refunds. Cancel anytime.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (Arm) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Latest Updates
Additional details
Usage instructions
Connection Methods:
To access your instance, SSH into the public IP address as rocky using your specified launch key pair. You can switch to the root user environment by running sudo su -. Please see the links below for additional information:
Firewall Configuration
-
SSH (Port 22): Required for initial system access.
-
Security Recommendation: For production environments, strictly limit SSH access to trusted IP addresses only via AWS Security Groups.
Support
Vendor support
Should you encounter any issues while using the system, please do not hesitate to contact us via email at: support@easyclouds.io ,Thank you!
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
This is a repackaged open source software product wherein additional charges apply for a pre-hardened, AWS-optimized image with verification reports and maintenance. This AMI delivers Rocky Linux 8.10 ARM64 hardened and tuned for EC2 by Easycloud-with security scan reports and SBOM.
This product has charges associated with it for a hardened, minimal Rocky Linux 10 ARM64 image, newest 10.x (now 10.2): SELinux enforcing, root login disabled, key-only SSH, audit rules, PAM lockout and sysctl hardening, each verified on a booted instance. 8GB size (no LVM), UEFI/GPT, cloud-init, ENA and NVMe.
This product has charges associated with it for a hardened, minimal Rocky Linux 10.2 ARM64 image: SELinux enforcing, root login disabled, key-only SSH, audit rules, PAM lockout and sysctl hardening, each verified on a booted instance. 8GB size (no LVM), UEFI/GPT, cloud-init, ENA and NVMe.
This is a repackaged open source software product wherein additional charges apply for a pre-hardened, AWS-optimized image with verification reports and maintenance. This AMI delivers Rocky Linux 10.2 hardened and tuned for EC2 by Easycloud-with security scan reports and SBOM.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.