Sold by: EASYCLOUD
Deployed on AWS
AWS Free Tier
This is a repackaged open source software product wherein additional charges apply for a pre-hardened, AWS-optimized image with verification reports and maintenance. This AMI delivers Rocky Linux 8.10 LVM hardened following DISA STIG guidance and tuned for EC2 by Easycloud-with before/after security scan reports and SBOM.
Overview
This is a repackaged open source software product wherein additional charges apply for a pre-hardened, AWS-optimized image with verifiable compliance evidence and maintenance. Based on Rocky Linux 8.10 LVM , this AMI is hardened following DISA STIG guidelines, tuned for Amazon EC2 workloads, and equipped with a complete OpenSCAP evidence pack and Software Bill of Materials (SBOM).
Value-Added Features
Security & Compliance:
-
DISA STIG Alignment: 266 security controls applied via the SCAP Security Guide, including auditd logging, SSH hardening, kernel command line and module blocklist restrictions, and strict password policy enforcement.
-
Fully Patched at Release: Zero packages with a pending update at build time, verified. The complete CVE scan ships inside the image.
-
Comprehensive Evidence Pack: Every AMI includes an OpenSCAP evidence pack generated against DISA STIG guidance for Rocky Linux 8.10, located under /opt/hardening-report/:
- Base_Report.html: Pre-hardening OpenSCAP scan report representing the initial baseline.
- Tailored_Profile_Report.html: Post-hardening scan report evaluated against the tailored profile shipped inside this image.
- Raw_STIG_Report.html: Post-hardening scan report evaluated against the unmodified baseline DISA STIG profile.
- Exceptions.txt: Itemized list of unapplied STIG rules along with technical justifications (AWS compatibility, site-specific policies, CSP service conflicts).
- Tuning_Parameters.txt: Every performance tuning parameter applied on top of the hardening, each shown against its base-image value.
- compliance_mapping.csv: Rule-by-rule mapping to NIST SP 800-53 controls and DISA STIG identifiers with pass/fail statuses.
- package_changes.txt: Package delta report comparing the final image against the minimal stock installation.
- sbom.spdx.json: Software Bill of Materials (SBOM) in SPDX format generated from the RPM database.
- cve_scan.txt / cve_scan_full.txt.gz: Vulnerability scan reports categorizing CVEs by upstream patch availability.
- key_files.sha256: SHA-256 checksums of the key configuration files changed by the hardening, so the delivered state can be verified.
- README.txt: Index file detailing artifact contents, administrative operational guidelines, and configuration defaults.
System Footprint & Reliability Optimization:
-
Minimal Footprint: Built on a minimal OS installation to reduce the attack surface and remove unnecessary packages.
-
Storage Layout: Configured with a streamlined LVM root (/) volume layout to minimize disk footprint while ensuring core system operation.
-
Validation Testing: Functional verification conducted on clean AMI launches through multi-round integration testing, verifying complete software lifecycle operations with SELinux enforcing.
AWS Network & Kernel Tuning:
-
Network Stack: TCP BBR congestion control with fair queueing, increased connection backlogs, buffer adjustments, and MTU probing enabled.
-
System Tuning: Red Hat tuned daemon active with a custom cloud profile, custom transparent hugepages (madvise), and modified memory/EBS writeback parameters.
-
EC2 Integration: Configured with NVMe I/O timeouts, Amazon Time Sync (chrony), IRQ balance daemon, and size-capped persistent journald logging.
Operational Tools
- Preinstalled Tools: AWS SSM Session Manager enabled, CloudWatch Agent installed (disabled by default).
Maintenance:
- Maintenance Specifications: Rebuilt and updated bi-weekly to monthly incorporating upstream Rocky Linux 8.10 security updates, updated artifact documentation per release, and administrative documentation.
About Rocky Linux 8 LVM
-
Rocky Linux 8 Foundation: Provides a robust, enterprise-grade underlying OS with deep structural alignment to RHEL, ensuring high security and seamless ecosystem compatibility with AlmaLinux, CentOS Stream, and traditional CentOS deployments.
-
Enterprise Stability: Rocky Linux 8.10 represents the culmination of the RHEL 8 lineage, offering long-term binary compatibility with Red Hat Enterprise Linux. As the final minor release of the Rocky 8 series, it incorporates years of upstream hardening, security updates, and stability improvements, making it a dependable base for mission-critical workloads.
Highlights
- DISA STIG Hardened Base: Pre-configured with 266 security controls applied via the SCAP Security Guide, incorporating SSH hardening, kernel command line and module blocklists, and strict password policies out of the box.
- Comprehensive Compliance Reports & SBOM: Includes verifiable security audit reports and a complete Software Bill of Materials (SBOM), enabling instant verification of DISA STIG posture and rapid vulnerability assessments out-of-the-box.
- AWS Performance Tuning & Regular Updates: Optimised for EC2 with TCP BBR and Red Hat tuned cloud profiles, updated bi-weekly to monthly with upstream security patches.
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
OtherLinux Rocky Linux 8.10
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier for more details.
Dimension | Cost/hour |
|---|---|
t3.medium Recommended | $0.04 |
t2.micro | $0.03 |
t3.micro | $0.03 |
t2.nano | $0.03 |
t3.nano | $0.00 |
t1.micro | $0.03 |
t3a.micro | $0.03 |
m1.small | $0.04 |
t2.small | $0.04 |
t3.small | $0.04 |
Dimensions summary
You pay by the hour for this hardened Rocky Linux 8.10 image, with the rate set by the Amazon EC2 instance type you run. Each dimension maps to one instance type, so no upfront commitment applies. Pricing scales with instance size and family. Smaller shared instances like t2 and t3 sit at one end, while larger compute (c), memory (r, x), storage (i, d), accelerated (g, p, inf), high-performance (hpc), and bare-metal options carry higher hourly rates. Choose the type that fits your workload; the software runs on top of standard EC2 usage.
Top-of-mind questions for buyers
You get a hardened Rocky Linux 8.10 image using LVM disk management, running on the Amazon EC2 instance type you select. The hourly rate covers the software license. Standard EC2 compute, storage, and network charges from AWS apply separately on the same bill.
The software license meters running hours only. When you stop or power off an instance, no software charges accrue for that time. You may still pay AWS storage fees for attached volumes while stopped. Charges resume automatically when you start the instance again.
The image follows industry hardening standards to reduce the attack surface, configure firewalls, and set access controls. It aims to help meet common compliance mandates. The vendor also offers separate hardening, tuning, and managed services outside this listing; contact them for those engagements.
www.easyclouds.io
Helpful?
Vendor refund policy
No refunds. Cancel anytime.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Latest Updates
Additional details
Usage instructions
Connection Methods:
To access your instance, SSH into the public IP address as rocky using your specified launch key pair. You can switch to the root user environment by running sudo su -. Please see the links below for additional information:
Firewall Configuration
-
SSH (Port 22): Required for initial system access.
-
Security Recommendation: For production environments, strictly limit SSH access to trusted IP addresses only via AWS Security Groups.
Support
Vendor support
Should you encounter any issues while using the system, please do not hesitate to contact us via email at: support@easyclouds.io ,Thank you!
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
This Rocky Linux 8.10 LVM image has charges associated with it for security hardening and optimization provided by ProComputers. Rocky Linux 8.10 LVM represents the latest and final minor release of the Rocky Linux 8 platform delivered with an LVM (Logical Volume Manager) partitioned disk layout, offering the most mature, stable, and flexible storage configuration before transitioning to Rocky Linux 9. LVM partitioning enables dynamic resizing of volumes, easier disk expansion, and improved storage management without downtime, making this Rocky8 AMI ideal for long-lived production systems. It provides a robust base for AWS EC2 workloads that require scalable storage, fast deployment, seamless updates through official Rocky Linux 8 repositories, and full cloud-init support for automation. Built, tested, and continuously maintained by ProComputers, this Rocky Linux 8.10 LVM image is production-ready and optimized for reliability, scalability, and storage flexibility in the AWS Cloud.
This Rocky Linux 10.2 LVM AMI has charges associated with it for security hardening and optimization provided by ProComputers. Rocky Linux 10.2 represents a next-generation, enterprise-class operating system built on the latest Rocky10 platform and delivered with an LVM (Logical Volume Manager) partitioned disk layout, offering a powerful and modular storage foundation for advanced cloud workloads. The LVM architecture enables online volume expansion, precise storage segmentation, and non-disruptive disk reconfiguration, making this Rocky10 AMI ideal for infrastructures that evolve rapidly. It provides a hardened and performance-tuned base for AWS EC2 deployments that require scalable storage, accelerated provisioning, continuous updates through official Rocky Linux 10.2 repositories. Built, validated, and actively maintained by ProComputers, this Rocky 10.2 LVM AMI is engineered for long-term stability, operational efficiency, and intelligent storage management in the AWS Cloud.
The official Rocky Linux 10 image with LVM
This Rocky Linux 8.10 image has charges associated with it for security hardening and optimization provided by ProComputers. Rocky Linux 8.10 represents the latest and final minor release of the Rocky Linux 8 platform, delivering the most mature, stable, and polished version before transitioning to Rocky Linux 9. This Rocky Linux 8.10 AMI enables fast deployment, seamless updates through official Rocky Linux 8.10 repositories, and full cloud-init support for automation. With ENA networking, SELinux enforcement, and full RHEL 8 compatibility, Rocky8 delivers consistent performance while giving you complete control over installed packages and system components. Built, tested, and continuously maintained by ProComputers, this Rocky Linux 8.10 image is production-ready and optimized for stability, scalability, and long-term operational consistency in the AWS Cloud.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.