Sold by: Cognosys Inc Hardened Images
Deployed on AWS
AWS Free Tier
RHEL 9 built to US DoD DISA STIG Medium. Covers CAT II to CAT III rules.
Overview
This RHEL 9 image is hardened to the Medium category of the US DoD DISA Security Technical Implementation Guide (STIG), covering CAT II to CAT III rules. Helps you meet DISA STIG technical controls. Compliance of your environment is determined by your assessor or Authorizing Official. Confirm the exact benchmark release, profile scope, and remediation coverage before deployment. Deploy only on a compatible architecture. Configure identity, network controls, TLS, storage, secrets, logging, monitoring, backups, capacity, updates, and recovery. Validate licensing, data handling, dependencies, security guidance, and upgrade procedures before production use.
Highlights
- RHEL 9 image hardened to the US DoD DISA STIG Medium category, covering CAT II to CAT III rules.
- Helps you meet DISA STIG technical controls. Compliance of your environment is determined by your assessor or Authorizing Official.
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
Rhel Stream
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier for more details.
- ...
Dimension | Cost/hour |
|---|---|
t3.small Recommended | $0.06 |
t3.micro | $0.06 |
i3en.2xlarge | $0.24 |
c6i.32xlarge | $3.84 |
c5n.large | $0.06 |
m6i.2xlarge | $0.24 |
r5d.12xlarge | $1.44 |
m5d.2xlarge | $0.24 |
g4dn.xlarge | $0.12 |
t3.large | $0.06 |
Dimensions summary
You pay by the hour for this hardened Red Hat Enterprise Linux 9 image, built to the DISA STIG Medium profile. Pricing is not tiered by features. Instead, each dimension matches a specific AWS EC2 instance type, and all instances run the same software. Your hourly rate depends on the instance you choose. Options span several families, including general purpose, compute-optimized, memory-optimized, storage-optimized, and GPU types. Within each family, rates scale with instance size, from small shared-core types up to large multi-core types. You pay only for the hours you run.
Top-of-mind questions for buyers
You pay for each hour your selected EC2 instance runs the hardened image. The rate covers the Red Hat Enterprise Linux 9 software hardened to the DISA STIG Medium profile on that specific instance size. Larger instance types carry higher hourly rates because they provide more compute, memory, or storage.
The software fee meters running hours only. A stopped or powered-off instance does not accrue software charges. Note that AWS may still bill underlying storage fees for stopped instances. You pay the per-hour software rate only while the instance is actually running.
All instance types run the same image. Each applies the DISA STIG Medium profile covering CAT II and CAT III rules at build time. The hardening scope does not change with instance size. Only the hourly rate differs, based on the instance family and size you pick.
secureanycloud.com
Helpful?
Vendor refund policy
No Refund but you can terminate the instance anytime to stop billing
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Updated with latest Security Patches & Industry Best Practices
Additional details
Usage instructions
To begin using this image, connect via SSH. Until you connect SSH into the instance and validate your credentials, you will not be able to access the Software. To connect to the operating system, use SSH and the username ec2-user. For instructions on using SSH to connect to your instance, see the AWS EC2 documentation: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/AccessingInstancesLinux.html Please note, this image may take up to 10 minutes to instantiate.
Software and dependencies: the software is installed in the image at build time; launching the instance downloads nothing and needs no ongoing external service. Operating system updates are fetched only when you run the package manager.
Data and encryption: application data, configuration and logs are kept on the instance's EBS volumes. The image applies no encryption of its own; turn on EBS encryption by default in your account if you need encryption at rest.
Health check: in the Amazon EC2 console, choose Instances, select your instance and open the Status checks tab; both the system and instance status checks should pass.
Costs and quotas: the product creates no AWS resources other than the EC2 instance and its EBS volumes, billed at standard AWS rates. Manage EC2 limits in Service Quotas: https://docs.aws.amazon.com/general/latest/gr/aws_service_limits.html
Resources
Vendor resources
Support
Vendor support
Cognosys provides technical support for Solution issues in multiple ways.Support can be availed by: 1. Email to Support@SecureAnyCloud.com (Preferred) 2. Live Support on
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
RHEL 9 built to US DoD DISA STIG High. Covers CAT I to CAT III rules.
This is a repackaged software product wherein additional charges apply for hardening, bundling and support. RHEL 9 built to US DoD DISA STIG Low.
This product has charges associated with it for DISA STIG security hardening. Madarson IT pre-hardened RHEL 9 AMI for DISA STIG compliance. Launch a security-optimized EC2 instance ready for DoD and federal workloads out of the box.
StigReady Applied for RHEL 9: CIS Benchmark aligned Level 2 remediation on the StigReady base, scored in the build. OpenSCAP score 99.2% against the unmodified SSG CIS Benchmark Level 2 Server profile (as of 2026-10-17). Full evidence bundle (OpenSCAP, POA&M, SBOM, CVE) for every version.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.