This Rocky Linux 9 image has charges associated with it for seller support and maintenance, featuring a standardized minimal environment, hardened SSH access, system security settings, persistent logging, Chrony time synchronization, and essential operational defaults.
This RockyLinux 9 image provides a standardized, security-focused operating system foundation for workloads running on EC2 instances. It is designed for teams that want a clean and consistently configured starting point for application servers, development environments, automation workers, and custom infrastructure deployments.
The image applies a practical set of CIS-inspired system settings, including password complexity and aging policies, inactive-account controls, automatic shell timeouts, restricted sudo behavior with session logging, protected system files, and hardened kernel and network parameters. Unnecessary desktop components, services, Bluetooth packages, and legacy network protocol modules are removed or disabled to reduce the system operational footprint.
Remote administration is secured through a hardened OpenSSH configuration. Root login, empty-password authentication, host-based authentication, keyboard-interactive authentication, X11 forwarding, TCP forwarding, and SSH agent forwarding are disabled. SSH connections use an explicitly defined set of modern ciphers, key-exchange algorithms, and message authentication codes. Authentication attempts, concurrent sessions, connection startup rates, and idle connections are also restricted.
For operational reliability, the image includes:
Rocky Linux 9 optimized for the x86_64 architecture
Current operating system packages at image build time
Chrony-based time synchronization
UTC timezone and a consistent system locale
Persistent systemd journal storage
Rsyslog-based system and authentication logging
Sudo activity logging and log rotation
Increased file-descriptor limits for server workloads
Reverse-path filtering, redirect protection, ASLR, and restricted kernel-pointer access
A local build-information file for OS, architecture, kernel, image version, and build timestamp identification
The image intentionally provides a minimal operating system baseline rather than a bundled application stack. Docker and application-specific runtimes are not enabled by default, allowing customers to install and manage only the components required for their workloads.
Important configuration notes: IPv6, SSH port forwarding, SELinux enforcement, and the auditd package are disabled by this image baseline configuration. Customers should review these settings against their own security, networking, monitoring, and compliance requirements before deploying production workloads. This image is security-focused but is not represented as CIS-certified.
Highlights
Rocky Linux 9 minimal base image, bug-for-bug compatible with RHEL 9, optimized for EC2 with cloud-init support, fast EBS-backed boot times, and secure defaults. Key features include SSH hardening, enforced SELinux, ENA support, and a lightweight footprint for cloud-native efficiency.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
You pay by the hour for this hardened Rocky Linux 9.8 image, with charges based on the EC2 instance type you run. Each dimension maps to one specific instance type, measured in hours of use. Pricing scales with the compute size and family you choose. Smaller general-purpose, compute, memory, storage, and accelerated-computing instances cost less per hour, while larger and bare-metal types cost more. You select the instance that fits your workload, and your hourly software charge follows that choice. There is no upfront commitment; you are billed only for the hours each instance runs.
Top-of-mind questions for buyers
What does one hour of billing cover for a given instance type?
One hour covers software use on a single running instance of the type you select. Each dimension maps to one EC2 instance type, measured in instance-hours. If you run several instances, each one meters its own hours separately on the same invoice.
Am I charged the hourly software fee when an instance is stopped?
The hourly software charge applies only while an instance runs. A fully stopped instance stops accruing the software fee. Underlying AWS storage or other resource charges may still apply, but the software meter tracks running time only.
How do I control cost when choosing between instance types?
You pick the instance type that fits your workload, and your hourly rate follows that choice. There is no upfront commitment. General-purpose, compute, memory, storage, and accelerated-computing families each carry their own hourly rate, so matching the type to your need keeps spending aligned with usage.
www.cloudfu.net
Helpful?
Vendor refund policy
The Rocky Linux 9 virtual machine can be terminated at anytime to stop incurring charges. No refund is available for this Rocky Linux 9 AMI.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
This is the very latest stable release of Rocky Linux 9.8 built at 2026/10/03
Additional details
Usage instructions
Ssh to the Rocky Linux 9.7 instance public IP address and login as 'rocky' user using the key specified at launch time. Use 'sudo su -' in order to get a root prompt.
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
This Rocky Linux 9 image has charges associated with it for security hardening and optimization provided by ProComputers. Designed for Amazon EC2, it gives teams a stable, RHEL-compatible operating system for running cloud applications with confidence. The image ships with cloud-init for automated setup, ENA drivers for fast networking, and SELinux in enforcing mode to protect workloads from the first boot. Packages come from the official Rocky Linux 9 repositories, so security patches and bug fixes arrive through the standard dnf update process. Whether you host websites, run databases, or build CI/CD pipelines, Rocky 9 offers a predictable release cycle and long-term support. ProComputers tests and refreshes the image on a regular schedule, helping you launch consistent, well-configured instances across every AWS region.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.