Overview
This AMI is maintained by Trusted Images and includes open source software packages for the target operating system.
WordPress with Apache on Amazon Linux 2023 AMI - hardened CMS AMI with Trusted Images email support
Trusted Images packages WordPress on Amazon Linux 2023 x86_64 for AWS buyers who want a maintained WordPress AMI with documented hardening records, monthly patch rebuilds, and documented support boundaries for image-specific questions.
What's included:
- WordPress release archive downloaded from wordpress.org and verified with a pinned SHA256
- Apache httpd and PHP-FPM packages from the Amazon Linux 2023 repositories
- WordPress served at /wordpress with setup entrypoints restricted to local requests
- No baked WordPress admin account, wp-config.php, database credentials, TLS certificates, or local database server
- Local runtime notes under /etc/trusted-images for WordPress setup and validation records
- Monthly security rebuilds and patch notifications
Security hardening:
- The AMI configuration requires IMDSv2 and HTTP metadata tokens.
- SSH root login and SSH password authentication are disabled by the common hardening role.
- Kernel and network sysctl hardening is applied during provisioning.
- Apache and PHP-FPM are configured for WordPress with release files present, local HTTP endpoints available, no wp-config.php file baked in, and no local database server.
- This image does not install TLS certificates, Certbot, a WordPress administrator account, database credentials, or a separate CMS data volume. Configure HTTPS, public access, authentication policy, backups, database access, and EC2 security groups deliberately for your workload.
Patch and rebuild cadence:
- The image is rebuilt monthly after upstream package updates and can be rebuilt sooner for urgent security fixes.
- Each supported AMI version includes configuration check output, source scan results, runtime hardening checks, SBOM data, and release notes for the delivered image.
Support: Trusted Images email support for configuration help, patch guidance, and troubleshooting. Contact support@trusted-images.com .
Evidence and SBOM availability:
- Trusted Images retains service validation records, source scan output, root filesystem scan results, hardening status, package inventory, and CycloneDX SBOM data for supported AMI versions.
- SBOM and scan evidence can be provided through Trusted Images support for the published AMI version.
Getting started:
- Launch from AWS Marketplace with a supported x86_64 EC2 instance type sized for your WordPress workload.
- Connect as the default Amazon Linux 2023 AMI user.
- Review /etc/trusted-images/wordpress-readme.txt after launch.
- Use an SSH tunnel to complete the local-only setup workflow, connect WordPress to your chosen MySQL-compatible database, then configure HTTPS and public access only after setup is complete.
No upstream affiliation:
- WordPress and Amazon Linux are separate upstream products. Trusted Images is not affiliated with, endorsed by, or sponsored by the WordPress project, WordPress Foundation, Automattic, Amazon, AWS, or their maintainers.
Highlights
- WordPress with Apache on Amazon Linux 2023 AMI with WordPress release files from the official WordPress release archive, Apache httpd, and PHP-FPM runtime.
- Hardened CMS defaults require IMDSv2, disable SSH password/root login, restrict setup entrypoints to local access, and do not bake wp-config.php, database credentials, or WordPress admin users.
- Monthly patched WordPress AMI records include root filesystem scan output, package inventory, SBOM data, hardening status, and launch documentation.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Dimension | Description | Cost/hour |
|---|---|---|
t3.small Recommended | Trusted Images - WordPress with Apache on Amazon Linux 2023 AMI on t3.small | $0.133 |
t3.micro | Trusted Images - WordPress with Apache on Amazon Linux 2023 AMI on t3.micro | $0.066 |
t2.micro | Trusted Images - WordPress with Apache on Amazon Linux 2023 AMI on t2.micro | $0.066 |
t3a.micro | Trusted Images - WordPress with Apache on Amazon Linux 2023 AMI on t3a.micro | $0.066 |
t3a.small | Trusted Images - WordPress with Apache on Amazon Linux 2023 AMI on t3a.small | $0.133 |
t2.small | Trusted Images - WordPress with Apache on Amazon Linux 2023 AMI on t2.small | $0.133 |
t2.large | Trusted Images - WordPress with Apache on Amazon Linux 2023 AMI on t2.large | $0.133 |
t3.large | Trusted Images - WordPress with Apache on Amazon Linux 2023 AMI on t3.large | $0.133 |
t3a.large | Trusted Images - WordPress with Apache on Amazon Linux 2023 AMI on t3a.large | $0.133 |
t3a.medium | Trusted Images - WordPress with Apache on Amazon Linux 2023 AMI on t3a.medium | $0.133 |
Vendor refund policy
Refunds follow AWS Marketplace policies. Contact support@trusted-images.com for product support questions.
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Initial Trusted Images AMI version AmazonLinux202606300001; includes current security updates, hardening baseline, SBOM, and root filesystem scan summary.
Additional details
Usage instructions
Connect by SSH as ec2-user. Review /etc/trusted-images/release, verify installed packages and service state where applicable, then configure authentication, storage, backups, monitoring, TLS, and EC2 security groups for your environment before production use.
Resources
Vendor resources
Support
Vendor support
Support Scope
Trusted Images email support covers launch guidance, AMI packaging questions, package/version questions for the delivered image, security patch and rebuild inquiries, Marketplace image issues, refund requests, and billing questions.
Included support topics:
- Security patch notifications and monthly rebuilds
- Configuration guidance and installation help
- Bug triage and workaround assistance
- Documentation and knowledge base access
Not included:
- Application code development
- Custom integrations or migrations
- Managed monitoring or continuous operations
How to Get Help
Contact support@trusted-images.com or use https://trusted-images.com/support . Include the Marketplace product name, AWS Region, AMI ID or product code when available, instance type, launch time, and a redacted description of the expected versus actual behavior. Do not send passwords, private keys, AWS secret keys, customer data, or logs containing secrets.
Support Boundaries
Support covers the AMI as delivered. Customer production operations, incident response, managed services, custom application code, customer data migration, and third-party integrations are outside the included support scope.
Buyer Responsibilities
You are responsible for AWS account configuration, IAM, VPC and security groups, TLS, backups, monitoring, data protection, application configuration, credential rotation, and production acceptance testing.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products

