Red Hat Enterprise Linux 10 - DISA STIG Hardened for AWS

This is a repackaged software product wherein additional charges apply for DISA STIG security hardening.

This AWS EC2 AMI delivers Red Hat Enterprise Linux 10 pre-hardened to align with Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs). Built by Madarson IT, this image is designed to help federal agencies, Department of Defense (DoD) contractors, and security-conscious organizations accelerate their path to an Authority to Operate (ATO) while reducing manual hardening effort.

This image arrives with DISA STIG security controls pre-applied, so your team can launch a compliance-ready instance in minutes rather than spending days manually configuring hardening settings. The configuration addresses operating system-level STIG requirements including:

• Restricted services and disabled unnecessary daemons
• Hardened authentication and access control policies
• System auditing and logging configured per STIG guidance
• File system permissions and ownership aligned to STIG benchmarks
• Network stack hardening and firewall rule enforcement
• Attack surface reduction through removal of non-essential packages

• DISA STIG Alignment: Built to address DISA's technical security controls for RHEL 10, supporting federal and DoD system authorization requirements.
• Secure-by-Default Configuration: Implements hardened system settings, restricted services, and tight access controls from first boot.
• Risk Mitigation: Helps defend against unauthorized access, data breaches, and advanced persistent threats by reducing the attack surface.
• Audit Readiness: Supports FISMA, RMF, and other federal security mandates requiring STIG validation. Run OpenSCAP or SCAP-compliant tools against this image to verify compliance posture.
• Continuous Updates: Madarson IT maintains and updates this image to reflect evolving STIG benchmarks and newly disclosed vulnerabilities.

This AMI is available for deployment on AWS EC2. After launching the instance, organizations should validate the STIG compliance posture using SCAP scanning tools and apply any environment-specific configurations required by their security authorization boundary.

1. Launch the AMI on a supported EC2 instance
2. Connect via SSH to validate the hardened configuration
3. Run an OpenSCAP scan to confirm STIG compliance status
4. Apply any mission-specific configurations for your authorization boundary
5. Document compliance posture for your ATO package

• This is a repackaged software product with additional charges for DISA STIG security hardening.
• Buyers should verify compatibility with their target EC2 instance types before deploying at scale.
• Application-layer STIGs and any CAT I findings requiring manual action remain the buyer's responsibility.
• Confirm whether a separate Red Hat subscription is needed for your use case or if RHEL licensing is included via the AWS Marketplace subscription.

Madarson IT certified images are always up to date, secure, follow industry standards, and are built to work right out of the box. Our DISA STIG-hardened images help organizations meet federal cybersecurity requirements efficiently and reliably.

Red Hat, Inc. holds the trademarks for Red Hat Enterprise Linux (RHEL) and associated branding. Madarson IT does not provide commercial licenses for Red Hat products.