OVERVIEW: Federal, defense, and regulated-industry teams running Rocky Linux from CIQ Pro Hardened 9 (x86_64) get a pre-hardened Enterprise Linux with kernel-level threat detection active at first boot. The Linux Kernel Runtime Guard (LKRG) detects kernel exploitation . FIPS 140-3 validated cryptography and hardened package configurations help teams meet audit requirements and save an estimated 1 to 3 FTE annually on manual hardening.
Highlights
Pre-hardened to STIG/CIS baselines, 95-99% compliant at first boot,
LKRG kernel runtime integrity monitoring,
FIPS 140-3 validated cryptographic modules
, Saves an estimated 1-3 FTE annually vs. manual hardening
, 100% Enterprise Linux binary compatible
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier for more details.
You pay by the hour for this hardened Rocky Linux operating system, billed per running EC2 instance. Pricing is not tiered by feature set. Instead, each rate maps to a specific EC2 instance type, so your cost tracks the size and family of the machine you run. Smaller instances like t3.nano carry lower hourly software rates, while larger compute, memory, GPU, and bare-metal types like p5.48xlarge carry higher rates. You add these software charges on top of standard AWS infrastructure charges. Costs scale with how many instances you run and how long each runs.
Top-of-mind questions for buyers
What counts as one billable unit for this hourly software charge?
You are billed per running EC2 instance, per hour. Each instance you launch with this operating system counts on its own. The hourly rate is set by that instance's type and family. Larger or GPU and bare-metal types carry higher rates. Running more instances multiplies your charge.
Am I charged the software rate when an instance is stopped or paused?
The software rate meters running instance-hours. A stopped instance does not accrue this hourly software charge. You may still pay underlying AWS storage fees for attached volumes while the instance is stopped. Charges resume when you start the instance again and continue while it runs.
What security capabilities does this hourly rate include on top of Rocky Linux?
The rate covers the hardened Rocky Linux build with pre-applied STIG profiles, FIPS 140-3 validated cryptography, real-time kernel threat detection, hardened packages, and CIQ support. These capabilities are included at every instance type. Your cost changes only with instance size and family, not with which features you use.
ciq.com+1
Helpful?
Vendor refund policy
Refunds are not available, though you may cancel your subscription at any time.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
RLC-H 9.7. RLC-H is based on the Latest Release and will automatically update to the latest available versions of the OS as they are released. This version is up-to-date as of June 01, 2026
Additional details
Usage instructions
Connect to the instance over SSH using the instance public IP, with username "rocky" and the private key generated when you launched the instance.
Example command: $ ssh -i ./ssh-private-key.pem rocky@PublicIPAddress
When you are logged in as "rocky", you can use the sudo command to run administrative tasks. Note that the specific command you use to connect to the instance may vary depending on the operating system and ssh client you are using on your end. By default, the instance is secured by AWS network security configuration; you may optionally install your choice of a local firewall such as firewalld after launch.
This Rocky Linux AMI provided by CIQ includes access to repositories for dnf/rpm updates and is regularly refreshed.
Support information: see the CIQ Support Overview under Learning Resources for full details.
CIQ is committed to providing a working image which meets the highest quality standards. If you have a question or encounter a problem related to deploying the software in this listing into your cloud environment, a question regarding the EULA, or if you are in interested in adding an enterprise support agreement via private offer for help managing your Rocky Linux operating system, contact CIQ Cloud Marketplace Support at cloudmarketplace@ciq.com.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.