Minimal and CIS-hardened version of the official Ubuntu Linux, optimized for AWS with 10 years of maintenance, enhanced security and compliance. The perfect base for lean and secure applications.
Ubuntu Pro Minimal 22.04 LTS with CIS hardening is designed for automated, large-scale deployments. It features a minimal package set, reduced footprint, and a limited attack surface - ideal for secure and efficient operations. This image comes with CIS hardening out of the box, which further strengthens security, compliance, and audit readiness.
Ubuntu Pro's expanded security coverage, delivering timely patches not only for the operating system but also for a wide range of third-party open-source packages. Advanced features such as kernel live patching and optional FIPS compliance are also included.
These capabilities enable organizations to adopt open-source technologies while maintaining rigorous standards for security, governance, and regulatory compliance. Ubuntu Pro is supported through April 2032.
Ubuntu Pro Minimal 22.04 LTS with CIS hardening remains fully compatible with both Ubuntu LTS Classic and Ubuntu LTS Minimal, adding default-enabled security enhancements along with compliance and management tools, making it ideal for Linux operations at any scale.
Why Developers and DevOps Teams Choose Ubuntu Pro Minimal on AWS
Lightweight & Secure: Optimized for minimal footprint and reduced attack surface.
Extensive Security Updates: Receive security patches for over 25,000 packages, including popular tools like Apache Kafka, NGINX, MongoDB, Redis, and PostgreSQL.
Built-in Security Hardening: Includes CIS and DISA-STIG compliance tools to establish a strong security baseline and support auditing needs.
FIPS 140-2 Certified Modules: Optional cryptographic modules for compliance with regulated environments.
Kernel Livepatch: Automatically applies critical kernel CVE patches at runtime without requiring an immediate reboot-enabled by default.
10-Year Security Maintenance: Supported through April 2032 with ongoing security updates.
Production-Ready: Ubuntu powers over 50% of Linux workloads in the cloud-trusted by enterprises globally.
Developer Friendly: Ubuntu is the top choice for developers, with the widest range of libraries, tools, and up-to-date open-source technologies.
Daily Updated Images: Canonical publishes refreshed images daily, ensuring secure, production-ready instances from the start.
Consistent Multi-Cloud Experience: Seamless integration across edge, data center, and public cloud ensures a uniform experience for CI/CD and management workflows.
Highlights
CIS-hardened out of the box
Lightweight and minimal attack surface
Secure supply chain with security updates by Canonical for 25,000+ packages.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier for more details.
You pay by the hour for each running instance, with no upfront commitment. Every pricing dimension maps to a specific EC2 instance type, so your rate depends on the instance size and family you choose. Smaller instances like t3.nano or t2.micro carry lower hourly rates, while large, memory-, compute-, or accelerator-focused types such as u-24tb1.112xlarge, p5.48xlarge, or metal instances carry higher rates. The software cost is added on top of your normal EC2 charge. Pricing scales with the number and size of instances you run, billed only for hours used.
Top-of-mind questions for buyers
What does the software fee cover on top of my EC2 charge?
The fee covers Ubuntu Pro Minimal 22.04 LTS with CIS hardening. You get expanded security patches, kernel live patching for uptime, FIPS and CC-EAL certified components, and native tooling to automate compliance against Center for Internet Security benchmarks. This adds to your standard EC2 instance charge.
Am I charged the software fee when an instance is stopped?
The software fee meters running instance-hours only. A stopped instance does not accrue the hourly software charge. You may still pay underlying AWS storage fees for attached volumes, but the Ubuntu Pro software licence bills only for hours the instance actually runs.
Does the hourly rate differ between instance types, and how is it counted?
Yes. Each dimension maps to one EC2 instance type, and the hourly software rate varies by that type. You are billed per running instance per hour. Running several instances bills each one separately, so total cost scales with both the number and type of instances active.
ubuntu.com+1
Helpful?
Vendor refund policy
No refunds will be issued for usage of this product.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Automated version update for new release
Additional details
Usage instructions
For Ubuntu Cloud Guest it is suggested to manually configure your Security Group/Firewall settings. The 1-Click Security Group opens only port 22 so that you can access your instance via ssh using login 'ubuntu'. If you chose the 1-Click Security Group, you may change it later to enable applications using the AWS Console or API.
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Minimal and CIS-hardened version of the official Ubuntu Linux, optimized for AWS with 10 years of maintenance, enhanced security and compliance. The perfect base for lean and secure applications.
This product has charges associated with the pre-built hardening to the CIS Benchmarks™ and recurring maintenance. The CIS Hardened Images® are hardened in accordance with the associated CIS Benchmarks, an industry best practice for secure configuration. Reduce cost, time, and risk by building your AWS solution with CIS AMIs.
This product has charges associated with the pre-built hardening to the CIS Benchmarks™ and recurring maintenance. The CIS Hardened Images® are hardened in accordance with the associated CIS Benchmarks, an industry best practice for secure configuration. Reduce cost, time, and risk by building your AWS solution with CIS AMIs.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.