Hardened CentOS Stream 10 Minimal with Utilities

This free product provides the CentOS Stream 10 repository snapshot, reduced server package set, and command-line utilities identified in the published release manifest, delivered as an Amazon Machine Image (AMI) by Hanwei. The image applies Hanwei's versioned security-hardening baseline, records its build-date package state, and is constructed without embedded customer credentials or account-specific configuration.

No Hanwei Marketplace software fee applies to this AMI. Customers pay for EC2, EBS, data transfer, public IPv4, and other AWS infrastructure or services they use. Hanwei's image preparation includes minimal package selection, documented utility integration, application of the verified security-hardening baseline, build-date package recording, credential-free AMI construction, repeatable image build, and bounded final-image testing.

• Reduced server package set: Hanwei prepares a minimal CentOS Stream 10 environment. The final RPM manifest, enabled-service inventory, listening-port report, default target, architecture, kernel, and image-build date define the actual image surface.
• Documented utility integration: Hanwei records utilities actually included in the final AMI by package/binary name, exact version or RPM NEVRA, source, path, license/notice status, and verification result. Only utilities appearing in that release manifest are included in the public release scope.
• Versioned security-hardening baseline: Hanwei applies a versioned operating-system profile. Only controls, values, exceptions, and effective states verified on the final AMI are included in the published release scope.
• Build-date package baseline: The release manifest records the operating-system identity, repositories, installed RPM NEVRAs, kernel, update state, and image-build date. This records a point in time and does not represent the AMI as continuously current after publication or launch.
• Credential-free construction: The published AMI contains no reusable customer password, private SSH key, AWS access key, secret access key, session token, customer CLI profile, internal repository credential, cloud-init secret, or account-specific endpoint configuration.
• Repeatable construction and bounded EC2 testing: Final-image verification covers EC2 launch and restart, operating-system identity, kernel and package inventory, utility path/version checks, configured access/update/security state, enabled services, listening ports, and credential absence on the recorded EC2 baseline.

• CentOS Stream release and repositories identified in the final release manifest
• Kernel and RPM package set identified by exact NEVRA in the final release manifest
• Utility packages and binaries identified by exact version or NEVRA in the final release manifest
• Hanwei versioned security-hardening configuration

The final release manifest must determine whether net-tools, zip/unzip, wget/curl, vim, tar/gzip, sudo, AWS CLI v2, Python, cloud-init, or any other component is actually included. No graphical environment, application server, web server, database, container runtime, monitoring agent, AWS management agent, encryption, snapshot, backup, restore, performance configuration, SSH configuration, SELinux state, firewall state, or update automation is represented as included unless it appears in the final package manifest and published release scope.