Sold by: CrowdStrike
Deployed on AWS
AWS Free Tier
Automate CrowdStrike Falcon sensor installation and configuration in your EC2 Image Builder AMI creation pipeline.
4.6
Overview
The CrowdStrike Falcon EC2 Image Builder Component streamlines security implementation by automating the installation and configuration of the CrowdStrike Falcon sensor during AMI creation. This reusable template integrates seamlessly with EC2 Image Builder, ensuring consistent security deployment across your AWS infrastructure.
Key Implementation Requirements:
- Component should be executed as the final step in your image pipeline
For detailed implementation guidance and component source code, visit our GitHub repository: https://github.com/CrowdStrike/aws-ec2-image-builder
Highlights
- Deploy Falcon sensor automatically during image creation
- Configure Falcon security settings consistently across images
- Integrate CrowdStrike protection from the first boot
Details
Sold by
Categories
Delivery method
Supported services
Delivery option
Latest version
Operating system
Linux
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Trust Center
Access real-time vendor security and compliance information through their Trust Center powered by Drata or Vanta. Review certifications and security standards before purchase.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
This product is available free of charge. Free subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier for more details.
Vendor refund policy
All Orders are non-cancellable and all fees and other amounts you pay under this Agreement are non-refundable.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Linux v1.2.3
Supported services:
- Amazon EC2 Image Builder
EC2 Image Builder Component
EC2 Image Builder is a fully managed AWS service. It automates creation, management, and deployment of custom, secure, and up-to-date server images. After procurement, use the EC2 Image Builder console/API to include this third-party component in golden images for future EC2 instances.
Version release notes
Additional details
Usage instructions
Support
Vendor support
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
The industry's most complete cloud-native application protection platform (CNAPP) with unified visibility across your apps, clusters, and clouds.
Deploy end-to-end CrowdStrike Falcon Cloud Security across AWS accounts, EKS clusters, and ECS workloads. Includes runtime protection, admission control, image assessment, and full cloud visibility.
Close the gap in Endpoint Detection & Response (EDR) and Next Gen AV capability by leveraging CrowdStrike's Next Gen EDR/AV solution deployed across your businesses' endpoints by Sekuro's professional services team.
More info about [CrowdStrike](https://www.crowdstrike.com/).
Fully managed CrowdStrike Falcon EDR operations delivered by Noventiq. Continuous monitoring, incident response, policy management, and automation delivered through AWS Marketplace to help you achieve stronger endpoint security outcomes without operational overhead.
Customer reviews
Shujauddin S.
CrowdStrike Falcon Cloud Security unifies agentless posture management with industry-
Reviewed on Jun 18, 2026
Review provided by G2
What do you like best about the product?
It brings together agentless posture management and industry-leading, threat-intelligence-driven runtime protection to help stop active cloud breaches without creating alert fatigue.
What do you dislike about the product?
This is a premium-priced and complex platform that can easily lead to alert fatigue and often requires substantial fine-tuning. Its agent-heavy architecture also introduces inherent risks of production disruption.
What problems is the product solving and how is that benefiting you?
It reduces fragmented tools and alert fatigue by bringing cloud posture management together with real-time threat intelligence. This helps security teams save time and stop active breaches before they affect the business.
anand a.
Unified Cloud Visibility That Finally Makes CSPM Manageable
Reviewed on Jun 17, 2026
Review provided by G2
What do you like best about the product?
Managing cloud security posture across our environment used to be a headache. Falcon Cloud Security gives us unified visibility across workloads and containers with clear, actionable findings. The CSPM capabilities are mature and the integration with our CI/CD pipeline was straightforward
What do you dislike about the product?
Pricing can be difficult to predict as your cloud footprint grows. Cost visibility could be clearer, especially for teams managing multiple cloud accounts.
What problems is the product solving and how is that benefiting you?
We struggled to maintain consistent security policies across multi-cloud environments. Falcon Cloud Security solved our blind spots by giving us a single pane of glass for cloud workload protection. We’ve significantly reduced misconfigurations that previously went unnoticed for weeks
Computer Software
Quiet, Unobtrusive Endpoint Security That Just Works
Reviewed on Jun 17, 2026
Review provided by G2
What do you like best about the product?
It runs quietly in the background without noticeably slowing down my laptop, which was my main concern when it was first installed by our IT team. I rarely notice it's there during regular work — no constant pop-ups or interruptions during video calls or while running other applications. It also gives me a sense of reassurance knowing endpoint security is being handled centrally by our organization (Capgemini) without me having to manage anything manually.
What do you dislike about the product?
As an end user, I don't have visibility into the dashboard, alerts, or detailed security reports, so it's hard for me to comment on the deeper analytics or threat-detection capabilities. Occasionally I've noticed minor lag during system startup, though I can't be fully certain this is due to Falcon specifically or other background processes. I'd also appreciate clearer communication or a simple status indicator showing that protection is active, just for peace of mind.
What problems is the product solving and how is that benefiting you?
It protects my work laptop from malware and other endpoint threats without requiring any action on my part, which lets me focus on my actual work instead of worrying about security. Since it's managed centrally by our IT/security team, I don't need to run manual scans or worry about updates — everything happens automatically in the background.
André B.
Maximum visibility of the cloud environment.
Reviewed on May 19, 2026
Review provided by G2
What do you like best about the product?
With minimal effort to connect the environments to Crowdstrike, we have a wealth of visibility, real-time monitoring, and a complete overview of any flaws and vulnerabilities the environment may have.
What do you dislike about the product?
The environment has been updated and has resolved the difficulties we previously had.
What problems is the product solving and how is that benefiting you?
It solves all the visibility issues, as the cloud environment can be very branched due to its characteristics, and Crowdstrike helps in this overall view.
MANI CHANDRA T.
Strong Runtime and Container Security with Solid Threat Intelligence
Reviewed on May 07, 2026
Review provided by G2
What do you like best about the product?
Agent + agentless approach.
Threat intelligence integration is solid, and the runtime and container security are strong.
Threat intelligence integration is solid, and the runtime and container security are strong.
What do you dislike about the product?
Cost and licensing complexity remain a concern for me. In some cases, cloud-native competitors feel cleaner and more straightforward. I also run into UI and workflow friction that makes day-to-day use less smooth than I’d like.
What problems is the product solving and how is that benefiting you?
Most companies today run workloads across AWS, Azure, Kubernetes, containers, SaaS apps, and remote endpoints. Security teams often end up with separate tools for posture management, runtime protection, identity monitoring, vulnerability scanning, and incident response. Falcon tries to consolidate those into a single platform.