Sold by: EASYCLOUD
Deployed on AWS
AWS Free Tier
This is a repackaged open source software product wherein additional charges apply for a pre-hardened, AWS-optimized image with verification reports and maintenance. This AMI delivers PostgreSQL 17 on a Amazon Linux 2023 base hardened following DISA STIG guidance and tuned for EC2 by Easycloud-with before/after security scan reports and SBOM.
Overview
This is a repackaged open source software product wherein additional charges apply for a pre-hardened, AWS-optimized image with verifiable compliance evidence and maintenance. PostgreSQL 17 runs on a Amazon Linux 2023 base hardened following DISA STIG guidelines, tuned for Amazon EC2 workloads, and shipped with a complete OpenSCAP evidence pack and Software Bill of Materials (SBOM).
Value-Added Features
PostgreSQL 17 Deployment:
-
Ready to Run: The database cluster is pre-initialized and natively integrated with systemd for automatic startup, so it accepts connections on first launch.
-
Extensions Pre-loaded: The matching contrib package is installed alongside the server, granting immediate access to widely used modules such as pg_stat_statements and uuid-ossp.
-
Bloat-Free Data Layer: CPU and memory go to the PostgreSQL shared_buffers rather than unused system services.
Hardened Operating System Base:
-
DISA STIG Alignment: 147 security controls applied to the Amazon Linux 2023 base via the SCAP Security Guide, including auditd logging, SSH hardening, kernel command line and module blocklist restrictions, and strict password policy enforcement.
-
Fully Patched at Release: Zero packages with a pending update at build time, verified. The complete CVE scan ships inside the image.
-
Documented Exceptions: Every STIG rule not applied is itemized with a technical justification, so the delivered posture is auditable.
Comprehensive Evidence Pack:
Every AMI carries an OpenSCAP evidence pack generated against DISA STIG guidance, under /opt/hardening-report/:
- Base_Report.html: Pre-hardening scan report, the initial baseline.
- Tailored_Profile_Report.html: Post-hardening report against the tailored profile shipped in this image.
- Raw_STIG_Report.html: Post-hardening report against the unmodified baseline DISA STIG profile.
- Exceptions.txt: Itemized unapplied STIG rules with technical justifications (AWS compatibility, site-specific policies, CSP service conflicts).
- Tuning_Parameters.txt: Every tuning parameter applied on top of the hardening, each shown against its base-image value.
- compliance_mapping.csv: Rule-by-rule mapping to NIST SP 800-53 controls and DISA STIG identifiers with pass/fail statuses.
- package_changes.txt: Package delta against the minimal stock installation.
- sbom.spdx.json: Software Bill of Materials in SPDX format, generated from the RPM database.
- cve_scan.txt / cve_scan_full.txt.gz: Vulnerability scan reports categorizing CVEs by upstream patch availability.
- key_files.sha256: SHA-256 checksums of the key configuration files changed by the hardening, so the delivered state can be verified.
- README.txt: Index of artifact contents, operational guidelines, and configuration defaults.
Reliability Validation:
- Validation Testing: Functional verification on clean AMI launches through multi-round integration testing, covering the complete database lifecycle with SELinux enforcing.
AWS Network & Kernel Tuning:
-
Network Stack: TCP BBR congestion control with fair queueing, increased connection backlogs, buffer adjustments, and MTU probing enabled.
-
System Tuning: Red Hat tuned daemon active with a custom cloud profile, transparent hugepages set to madvise, and modified memory/EBS writeback parameters.
-
EC2 Integration: NVMe I/O timeouts, Amazon Time Sync (chrony), IRQ balance daemon, and size-capped persistent journald logging.
Operational Tools:
- Preinstalled Tools: AWS SSM Session Manager enabled, CloudWatch Agent installed (disabled by default).
Maintenance:
- Maintenance Specifications: Rebuilt and updated bi-weekly to monthly incorporating upstream PostgreSQL and Amazon Linux 2023 security updates, with artifact documentation refreshed per release.
About PostgreSQL 17
One of the world's most advanced open-source object-relational database systems, engineered for complex queries, data integrity, and performance in cloud-native environments. Release 17 overhauls memory management for vacuum processes to cut system overhead. PostgreSQL serves as an open-source migration target from commercial databases and as a backend for frameworks such as Spring Boot, Django, and Laravel with ORMs including Hibernate, Prisma, and SQLAlchemy.
About Amazon Linux 2023
Maintained by AWS with a deterministic release cadence and quarterly updates, Amazon Linux 2023 integrates natively with AWS services and the EC2 Nitro platform. It ships SELinux enabled by default, its package set is curated for cloud workloads, and each major version carries a five-year lifecycle, giving teams a stable landing zone aligned with the AWS ecosystem.
Highlights
- PostgreSQL 17 on a DISA STIG Hardened Base: 147 security controls applied to the Amazon Linux 2023 foundation via the SCAP Security Guide, incorporating SSH hardening, kernel command line and module blocklists, and strict password policies out of the box.
- Verifiable Evidence Pack and SBOM: A 12-file OpenSCAP evidence pack ships inside the image, with before/after scan reports, itemized exceptions and justifications, NIST SP 800-53 mapping, CVE scan, and a complete SPDX Software Bill of Materials.
- PostgreSQL 17: Best-practice deployment. Cluster pre-initialized and managed by systemd with the contrib extension set installed - on an EC2-tuned base with TCP BBR and Red Hat tuned cloud profiles, rebuilt bi-weekly to monthly with upstream security patches.
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
AmazonLinux 2023
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier for more details.
Dimension | Cost/hour |
|---|---|
t3.medium Recommended | $0.04 |
t2.micro | $0.04 |
t3.micro | $0.04 |
m7a.xlarge | $0.29 |
d3en.12xlarge | $0.68 |
x2idn.24xlarge | $0.68 |
r5dn.large | $0.12 |
c6in.12xlarge | $0.68 |
z1d.large | $0.12 |
c4.4xlarge | $0.29 |
Dimensions summary
You pay by the hour for the specific Amazon EC2 instance type you run. Each dimension maps to one instance type, so pricing scales with the compute, memory, and storage capacity you choose. Smaller instances like t3.nano or m1.small cost less per hour, while large or metal instances like p5.48xlarge or x2iedn.metal carry higher hourly rates. General-purpose (m, t), compute-optimized (c), memory-optimized (r, x), storage (i, d), and accelerated (g, p, inf, trn) families are all available. You add the software fee to standard AWS infrastructure charges. Run only what you need, when you need it.
Top-of-mind questions for buyers
You get a hardened PostgreSQL database pre-installed on Amazon Linux 2023, running on the EC2 instance size you select. The software is security-tuned to standards like CIS Benchmarks. Each hourly rate covers that software running on one instance of the matching type.
The hourly software fee meters only running time. A stopped instance does not accrue software charges. You may still pay standard AWS storage fees for the attached volumes while the instance is stopped. Charges resume when you start the instance again.
Two charges apply at the same time for each running hour. One is the vendor software fee tied to your chosen instance type. The other is the standard AWS infrastructure cost for that EC2 instance. Both appear together, and larger instance types raise both charges.
www.easyclouds.io
Helpful?
Vendor refund policy
No refunds. Cancel anytime.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Latest Updates
Additional details
Usage instructions
Connection Methods:
Access the instance via SSH using the 'ec2-user' user. Use 'sudo' to run commands requiring root privileges. To switch to the root user, use 'sudo su - root'.
Install Information
- Operating System: Amazon Linux 2023
- PostgreSQL Version: 17
- Port: 5432
- Superuser: postgres
- Data Directory: '/var/lib/pgsql/data/'
- Config Files: '/var/lib/pgsql/data/postgresql.conf' and '/var/lib/pgsql/data/pg_hba.conf'
- Log Directory: '/var/lib/pgsql/data/log/'
Usage Instructions
-
Local Admin Access: Connect locally by running: 'sudo -u postgres psql'
-
Manage Service: Use 'sudo systemctl start/stop/restart postgresql' to control the database daemon.
-
Enable Remote Access:
By default, PostgreSQL only allows local connections. To enable remote access, complete these exact steps:
-
Step 1: Open '/var/lib/pgsql/data/postgresql.conf', find the 'listen_addresses' parameter, uncomment it, and set it to: listen_addresses = '*'
-
Step 2: Open '/var/lib/pgsql/data/pg_hba.conf', scroll to the very bottom, and append this exact line: host all all 0.0.0.0/0 scram-sha-256
-
Step 3: Apply the configuration changes by running: sudo systemctl restart postgresql
-
Step 4: AWS Firewall: Go to your AWS Console and ensure the EC2 Security Group has an Inbound Rule allowing TCP Port 5432.
Firewall Configuration
-
SSH (Port 22): Required for initial system access.
-
PostgreSQL (Port 5432): Required for remote database clients (e.g., pgAdmin, DBeaver) or application servers to connect.
-
Security Recommendation: For production environments, strictly limit access to ports 22 and 5432 to trusted IP addresses only via AWS Security Groups.
Support
Vendor support
Should you encounter any issues while using the system, please do not hesitate to contact us via email at: support@easyclouds.io ,Thank you!
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
This is a repackaged software product wherein additional charges apply for a pre-hardened, SI Core STIG Hardened image and seller support. PostgreSQL on Amazon Linux 2023 offers a robust and secure database solution designed for scalability and performance within the AWS ecosystem. Leveraging the latest technology and security standards, PostgreSQL on Amazon Linux 2023 ensures high availability and easy management for your data workloads. Ideal for developers and enterprises, this AMI simplifies the deployment process, allowing you to focus on building applications while reducing operational overhead. With PostgreSQL on Amazon Linux 2023, you can efficiently handle complex queries and large datasets, all while benefiting from the agility and flexibility of the cloud.
This is a repackaged open source software product wherein additional charges apply for a pre-hardened, AWS-optimized image with verification reports and maintenance. This AMI delivers PostgreSQL 16 on a Amazon Linux 2023 base hardened following DISA STIG guidance and tuned for EC2 by Easycloud-with before/after security scan reports and SBOM.
This is a repackaged open source software product wherein additional charges apply for a pre-hardened, AWS-optimized image with verification reports and maintenance. This AMI delivers PostgreSQL 18 on a Amazon Linux 2023 base hardened following DISA STIG guidance and tuned for EC2 by Easycloud-with before/after security scan reports and SBOM.
This product has charges associated with it for image hardening, maintenance, and support. PostgreSQL 16 on Amazon Linux 2023, security-hardened for production: minimal package set, SSH key-only access, IMDSv2-only, no password auth, data directory initialized on first boot, and continuously patched images.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.