Overview
OpenSearch Dashboards welcome
The OpenSearch Dashboards welcome screen after first login, showing the OpenSearch Dashboards 3.6 interface ready to use.
OpenSearch Dashboards welcome
Dev Tools Console
Service status and cluster health
This is a repackaged open source software product wherein additional charges apply for cloudimg support services.
OpenSearch 3 - Ready-to-Run Search and Analytics on AWS
This is a repackaged open source software product wherein additional charges apply for cloudimg support services.
OpenSearch is the open source distributed search and analytics engine forked from Elasticsearch. This AMI delivers OpenSearch 3.6 and OpenSearch Dashboards 3.6 fully installed and running as systemd services, giving DevOps teams and platform engineers a complete search and analytics platform within minutes of launch - eliminating hours of manual installation, dependency resolution, and security hardening.
Why This AMI Over Manual Deployment or Competing Images
- Minutes to first query, not hours: Both OpenSearch and Dashboards start automatically on boot. No package installation, no YAML editing, no plugin configuration required.
- No shared or default credentials: Unlike images that ship with known passwords, every instance generates a unique 20-character admin password on first boot, eliminating credential-sharing risk.
- Isolated data storage: A dedicated 30 GiB gp3 EBS volume for index data means you can resize storage independently without risking your OS root disk - flexibility that managed services often restrict.
Software Stack
- OpenSearch 3.6.0 running as a systemd service with the security plugin enabled (TLS/HTTPS support, role-based access control)
- OpenSearch Dashboards 3.6.0 providing the web UI for index management, visualization, and data exploration
- Both services run under a dedicated system user for process isolation
- Ubuntu base with regular security updates
Secure First Boot
On first boot, a one-shot systemd service generates a fresh 20-character admin password unique to that instance, configures it via the OpenSearch security plugin, and stores the plain text value in a root-only credentials file (/root/.opensearch_credentials). No shared or default credentials remain in the running image. This approach helps teams meet access-control requirements without manual post-launch hardening.
Dedicated Data Disk
OpenSearch index data lives on a separate 30 GiB gp3 EBS volume mounted at /var/lib/opensearch/data. This architecture lets you resize or snapshot index storage independently of the OS root disk - reducing operational risk during scaling events and simplifying backup workflows.
Encryption and Network Security
The OpenSearch security plugin supports TLS/HTTPS on ports 9200 and 5601. The EBS data volume supports AWS encryption at rest via KMS. For production deployments, we recommend launching in a private VPC subnet with security group rules restricting ingress to ports 9200, 5601, and 22 from trusted CIDR ranges only.
AWS Integrations
This AMI works with common AWS services and open source tools for data ingestion and monitoring:
- Amazon S3 - Use snapshot/restore to back up indexes to S3 or ingest data from S3 buckets
- Amazon CloudWatch - Forward instance and application metrics for centralized monitoring
- Fluent Bit / Logstash - Ship logs from containerized workloads or EC2 instances into OpenSearch for analysis
- Prometheus and Grafana - Monitor OpenSearch cluster health metrics alongside your existing observability stack
Use Case: Log Analytics for Containerized Workloads
A DevOps team running microservices on Amazon ECS or EKS can deploy this AMI as a single-node log analytics backend. Fluent Bit sidecars ship structured JSON logs to the OpenSearch REST API on port 9200. OpenSearch Dashboards on port 5601 provides real-time visualization of error rates, latency percentiles, and deployment events - suitable for environments ingesting up to tens of gigabytes per day on appropriately sized instances.
Additional Use Cases
- Application search and full-text search
- E-commerce product search and faceted navigation
- Security information and event management (SIEM)
- Real-time data ingestion and dashboarding
cloudimg Support
24/7 technical support by email and live chat. Our engineers help with OpenSearch deployment, index management, search query optimization, dashboards, cluster configuration, and performance tuning. Critical issues receive a one-hour average response.
Get Started
Launch the AMI, retrieve your unique admin password from /root/.opensearch_credentials, and begin indexing data via the REST API on port 9200 or explore your data through Dashboards on port 5601.
All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.
Highlights
- Launch a complete OpenSearch 3.6 search and analytics platform in minutes rather than spending hours on manual installation and configuration. Both OpenSearch and OpenSearch Dashboards run as systemd services immediately after boot - no package setup, YAML editing, or plugin installation required. Ideal for DevOps teams and platform engineers who need a single-node search backend for development, staging, or production log analytics workloads.
- Every instance generates a unique 20-character admin password on first boot - unlike competing AMIs that ship with known default credentials. The password is stored in a root-only file, eliminating credential-sharing risk and helping teams meet access-control compliance requirements without manual post-launch hardening. TLS/HTTPS is supported via the OpenSearch security plugin for encrypted communication on ports 9200 and 5601.
- Index data lives on a dedicated 30 GiB gp3 EBS volume, independently resizable and snapshotable without touching the OS root disk. This separation reduces operational risk during scaling events and simplifies backup workflows compared to co-locating data on the root volume. Integrates with Amazon S3 for snapshot storage, Fluent Bit and Logstash for log ingestion, and CloudWatch for monitoring.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Free trial
- ...
Dimension | Description | Cost/hour |
|---|---|---|
t3.medium Recommended | t3.medium | $0.04 |
t3.micro | t3.micro instance type | $0.04 |
t2.micro | t2.micro instance type | $0.04 |
c6id.large | c6id.large instance type | $0.08 |
vt1.3xlarge | vt1.3xlarge instance type | $0.24 |
inf1.6xlarge | inf1.6xlarge instance type | $0.24 |
r8a.16xlarge | r8a.16xlarge instance type | $0.24 |
m6in.large | m6in.large instance type | $0.08 |
c8ib.large | c8ib.large instance type | $0.08 |
g6e.xlarge | g6e.xlarge instance type | $0.12 |
Vendor refund policy
Refunds available on request.
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Remediates flagged CVEs: full apt update (kernel + userspace); rng-tools added.
Additional details
Usage instructions
Connect via SSH on port 22 as the 'ubuntu' user. OpenSearch REST API is on port 9200, OpenSearch Dashboards on port 5601. Retrieve the generated admin password with: sudo cat /root/opensearch-credentials.txt. Browse to http://<instance-public-ip>:5601 and sign in as 'admin' with the generated password. The REST API is available at http://<instance-public-ip>:9200 with the same credentials. Restrict ports 9200 and 5601 to trusted networks. See the user guide for index management, REST API usage, and HTTPS configuration.
Resources
Vendor resources
Support
Vendor support
cloudimg Technical Support
cloudimg provides 24/7 technical support for this OpenSearch AMI by email and live chat.
What We Help With:
- OpenSearch deployment and initial configuration
- Index management and search query optimization
- OpenSearch Dashboards setup and visualization
- Cluster configuration and performance tuning
- Instance sizing recommendations for your workload
- Troubleshooting and issue resolution
- Security plugin configuration (TLS, RBAC)
- EBS data volume resizing and snapshot guidance
Response Times:
Critical issues receive a one-hour average response time. Our engineers are available around the clock to help resolve problems impacting your search infrastructure.
Instance Sizing Guidance:
For development and testing workloads, instances with 2-4 vCPUs and 8-16 GiB RAM are typically sufficient. For production log analytics or search workloads handling higher data volumes, consider instances with 8+ vCPUs and 32+ GiB RAM. Our support team can help you select the right instance type based on your indexing rate and query patterns.
How to Get Help:
Contact us at support@cloudimg.co.uk for any issues including deployment assistance, troubleshooting, configuration questions, or to request a refund. Live chat is also available for real-time assistance.
Launch Prerequisites:
Ensure your security group allows inbound traffic on port 9200 (OpenSearch API), port 5601 (Dashboards), and port 22 (SSH) from your trusted IP ranges. After launch, retrieve your admin password from /root/.opensearch_credentials via SSH.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.