LAMP Stack with phpMyAdmin - Hardened, CloudWatch & SSM Ready

Deploy a fully configured Linux, Apache, MariaDB, and PHP web server on AWS in under 5 minutes with 1-Click deploy. Built for freelance web developers, startup teams, and small businesses who need a secure, reliable PHP environment without spending hours on manual server configuration.

• Freelancers launching client websites and PHP applications on dedicated infrastructure
• Startup teams prototyping MVPs who need a working LAMP environment immediately
• Small teams without dedicated DevOps migrating from shared hosting to AWS
• Developers running internal PHP tools, staging environments, or WordPress-alternative sites

Pre-integrated PHP Stack

• Apache with mod_php and PHP-FPM, plus essential PHP extensions (MySQL/mysqlnd, PDO, GD, cURL, mbstring, XML, JSON, CLI)
• MariaDB server and client, tuned to bind to localhost only with utf8mb4 default character set and 10-day binary log expiry
• phpMyAdmin installed and served at /phpmyadmin with control tables initialized and a unique blowfish secret generated per instance

Per-Instance Credential Generation On first boot, the image sets a unique MariaDB root password, creates a dedicated database user, and writes everything to /opt/lamp/generated-credentials.txt. No credentials are shared across instances or stored in the image.

Amazon CloudWatch Integration CloudWatch Agent is pre-configured to ship Apache access/error logs, MySQL error logs, syslog, and auth.log to CloudWatch Logs (per-instance streams, 30-day retention). CPU, memory, disk, TCP connection-state, and process metrics are published under the SolveDevOps/LAMP namespace, tagged with instance ID, instance type, and Auto Scaling group.

AWS Systems Manager Integration SSM Agent installed and enabled for Session Manager shell access without opening SSH, plus Patch Manager and Run Command support.

TLS Tooling Certbot pre-installed for Let's Encrypt certificates - secure your site with HTTPS in minutes.

This AMI follows baseline security practices to protect your web-facing infrastructure:

• Password SSH authentication disabled - key-based access only
• Root remote login disabled
• X11 forwarding off
• No baked-in keys or shell history
• Build-time credentials and cloud-init state scrubbed
• MariaDB bound to localhost only - not exposed to the network
• Unique credentials generated per instance - never shared across deployments

1. Click Subscribe above to start the deployment process
2. Configure your server based on the needs of your application
3. Launch your server (allow about one minute for first-boot credential generation)
4. Attach an IAM instance role with CloudWatchAgentServerPolicy and AmazonSSMManagedInstanceCore for full monitoring and management
5. Access your server at http://your-server-ip  to confirm Apache is running
6. Place your application files in /var/www/html/
7. Retrieve your unique database credentials from /opt/lamp/generated-credentials.txt

Full root access is provided. CloudWatch Agent config is located at /opt/aws/amazon-cloudwatch-agent/etc/amazon-cloudwatch-agent.d/lamp.json.

A freelance developer needs to deploy a custom PHP application for a client on reliable infrastructure. Instead of spending 2-3 hours installing and configuring Apache, MariaDB, PHP extensions, and phpMyAdmin manually, they subscribe to this AMI, launch an instance, and have a production-ready environment in minutes. Pre-configured CloudWatch logging lets them monitor the client site from day one, and security hardening gives them confidence the server isn't exposed to common attack vectors.

All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.