Overview
This is a repackaged software product wherein additional charges apply for hardening, security configuration, and support.
WHAT IS PRESTASHOP
PrestaShop is a leading open-source eCommerce platform for building and running online stores - a PHP 8 web application served by Nginx with PHP-FPM and backed by MySQL 8. The bundled feature set covers product catalog and category management, customer accounts, shopping cart and one-page checkout, order and invoice management, promotions and vouchers, multi-currency and multi-language storefronts, SEO-friendly URLs, a customizable responsive storefront theme, a REST/webservice API, and a full back office for merchandising, shipping, payment, and tax configuration - extensible through a native module ecosystem. This AMI ships the open-source core only (OSL-3.0 core, AFL-3.0 modules and themes) with its bundled native modules and the default storefront theme; it includes nothing from the commercial PrestaShop Addons marketplace or PrestaShop Checkout. A self-hosted alternative to hosted store builders that keeps your catalog, orders, and customer data inside your own AWS account. OSL-3.0 license - no per-store fees, no vendor lock-in.
WHAT THIS AMI ADDS
Security hardening:
- Store installed at first boot with generated admin credentials (saved to /root/prestashop-credentials.txt)
- Web installer removed and the admin (back office) folder randomized per instance after setup
- TLS enabled by default (self-signed); Certbot pre-installed - trusted HTTPS with Let's Encrypt in one command
- MySQL 8 database bound to 127.0.0.1 only
- UFW firewall - ports 22 and 443 only
- fail2ban, AppArmor
- CVE scan - every image is scanned for vulnerabilities before release
OS hardening (CIS Level 1):
- CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown
- auditd, SSH hardening, Kernel hardening, IMDSv2 enforced
Compliance artifacts:
- SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json
- CIS Conformance Report at /etc/lynxroute/cis-report.html
- CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md
Highlights
- PrestaShop security baked in: the store is installed at first boot with generated admin credentials, the web installer removed, the back-office URL randomized per instance, MySQL bound to localhost, and TLS on by default.
- CIS Level 1 hardened Ubuntu 24.04 LTS: auditd, fail2ban, AppArmor, SSH key-only, IMDSv2 enforced. CVE-scanned before every release. SBOM (CycloneDX) and CIS Conformance Report included.
- Production-ready eCommerce stack: Nginx + PHP 8.3 + MySQL 8 with a ready-to-customize storefront and back office, Certbot pre-installed for Let's Encrypt HTTPS. OSL-3.0 license - fully auditable, no vendor lock-in.
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Free trial
Dimension | Cost/hour |
|---|---|
t3.medium Recommended | $0.02 |
t3.large | $0.03 |
m6i.xlarge | $0.05 |
m6i.large | $0.03 |
Vendor refund policy
We do not offer refunds for this product. AWS infrastructure charges (EC2, EBS, data transfer) are billed separately by AWS and are not refundable by us.
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
PrestaShop 9.1.4 - Initial release (June 2026)
- PrestaShop 9.1.4 on Ubuntu 24.04 LTS
- CIS Level 1 hardening applied (ansible-lockdown/UBUNTU24-CIS)
- CVE-scanned before every release
- Nginx + PHP 8.3 + MySQL 8; store installed at first boot with generated admin credentials
- Web installer removed and back-office URL randomized per instance after setup
- TLS enabled by default (self-signed); Certbot pre-installed for Let's Encrypt
- UFW firewall pre-configured (ports 22, 443 only)
- fail2ban, auditd, AppArmor pre-configured
- SBOM (CycloneDX 1.6) at /etc/lynxroute/sbom.json
- CIS Conformance Report (OpenSCAP) at /etc/lynxroute/cis-report.html
- IMDSv2 enforced
Additional details
Usage instructions
- Launch instance (t3.medium recommended)
- Open Security Group - allow TCP 443 from 0.0.0.0/0 and TCP 22 from your IP
- SSH: ssh -i key.pem ubuntu@<PUBLIC_IP>
- Wait 3-6 minutes on first launch for the store to finish installing
- Read credentials: sudo cat /root/prestashop-credentials.txt
- Open the storefront: https://<PUBLIC_IP>/ - accept the self-signed certificate warning
- Open the back office at the unique admin URL printed in the credentials file and log in with the admin email and password from that file
The store is installed automatically on first launch; the admin email, password, and the per-instance back-office URL are saved to /root/prestashop-credentials.txt. Change the admin email and password after first login. A demo catalog is preloaded so the storefront renders immediately - remove it before going live. For production, point a domain at the instance and get a trusted certificate: sudo certbot --nginx -d your.domain.com (open Security Group + UFW port 80 first for the HTTP-01 challenge).
Resources
Vendor resources
Support
Vendor support
Lynxroute is not affiliated with PrestaShop SA - this AMI packages the open-source core (PrestaShop/PrestaShop) under OSL-3.0 with its bundled AFL-3.0 native modules and default theme. "PrestaShop" is a registered trademark of PrestaShop SA. Source code: https://github.com/PrestaShop/PrestaShop
Visit us online: https://lynxroute.com/#contact
For PrestaShop documentation:
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
