Sold by: Cornerstone Technologies
Deployed on AWS
Ubuntu 24.04 LTS hardened to the CIS Server Level 1 Benchmark via OpenSCAP, with Nagios Core 4.5.9 and essential plugins preinstalled. Secure defaults: IMDSv2-only, key-based SSH, nftables active, and Apache web UI ready for monitoring out of the box.
Overview
This AMI provides a secure and production-ready monitoring stack on Ubuntu 24.04 LTS, preconfigured with Nagios Core 4.5.9 and key plugins. The system is hardened using OpenSCAP to align with the CIS Level 1 Benchmark (non-certified), and includes nftables for firewalling, with SSH (port 22) and HTTP (port 80) open by default.
Key features include key-based SSH authentication, IMDSv2 enforcement, and a clean Nagios web interface via Apache with no default users. Email alerting via Postfix is preinstalled and ready for AWS SES configuration. The image is HTTPS-ready, and users may enable SSL via Let's Encrypt or a self-signed certificate.
This AMI is ideal for teams seeking fast, secure deployment of monitoring tools on EC2. Optional managed services are available for customers who wish to outsource administration or customize their monitoring environments.
Optional full-service management and support agreements are available on request.
Highlights
- Pre-hardened Ubuntu 24.04 using OpenSCAP aligned to CIS Server Level 1 Benchmark, secure-by-default AMI for security-sensitive environments.
- Nagios Core 4.5.9 and plugins preinstalled with key-based SSH, Web based UI, and Postfix alerting, monitoring stack ready in minutes.
- Optional managed service offering: get expert help configuring, maintaining, and scaling your Nagios Core-based monitoring environment.
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
Ubuntu 24.04 LTS
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
t3a.medium Recommended | $0.05 |
t3a.large | $0.08 |
t3.large | $0.08 |
t3a.small | $0.03 |
t3.medium | $0.05 |
t3.small | $0.03 |
Dimensions summary
You pay by the hour for the EC2 instance size you run this pre-configured Nagios Core monitoring AMI on. All six dimensions deliver the same software; they differ only by compute capacity. The t3a.small and t3.small options provide the least compute, followed by the t3.medium and t3a.medium pair, then the t3.large and t3a.large pair. The t3a instances use AMD processors, while the t3 instances use Intel processors. Choose the size that matches your monitoring workload. Billing scales with your running hours, so you only pay while instances run.
Top-of-mind questions for buyers
Each size maps to an EC2 instance type with set vCPU and memory. The small options give the least compute, the medium options give more, and the large options give the most. The t3a sizes run on AMD processors; the t3 sizes run on Intel processors. All run the same Nagios Core AMI.
Software charges accrue per hour only while an instance runs. Stopped instances do not accrue software fees. Underlying AWS storage costs for the instance volume may still apply while it is stopped, but the hourly software meter counts running time only.
Billing meters actual running hours with no upfront commitment. Continuous monitoring accrues charges for every hour the instance stays on. The rate depends on the instance size you choose. You can stop the instance anytime to halt software charges.
cornerstonetechnologies.com
Helpful?
Vendor refund policy
This AMI is provided as-is on an hourly billing basis. Refunds are not offered for usage charges.
If you believe you were charged in error, please contact us at support@cornerstonetechnologies.com .
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Initial release of Security-Hardened Ubuntu 24.04 AMI with Nagios Core 4.5.9.
- CIS Level 1 hardening via OpenSCAP
- Preinstalled Nagios Core 4.5.9 with plugins
- Apache web interface ready for Nagios
- Postfix installed for email alerting
- SSH key-only login with IMDSv2 enforcement
- nftables firewall enabled (ports 22, 80 open by default)
CIS Benchmarking is performed using OpenSCAP. Please note that while this image follows CIS guidelines, it is not CIS-certified.
Additional details
Usage instructions
-
Connect via SSH as the 'ubuntu' user (use your EC2 keypair): ssh -i your-key.pem ubuntu@<instance-ip>
-
Create your first Nagios web user: sudo htpasswd /usr/local/nagios/etc/htpasswd.users <username> && sudo systemctl reload apache2
-
Access the Nagios UI: http://<instance-ip>/nagios/
-
Recommended: Enable HTTPS for the web UI: https://httpd.apache.org/docs/2.4/ssl/ssl_howto.html or Let's Encrypt: https://certbot.eff.org/
-
Recommended: Configure email alerts: Postfix is preinstalled. Recommended AWS SES relay setup: https://docs.aws.amazon.com/ses/latest/dg/postfix.html
-
Security Hardening: A copy of the OpenSCAP CIS Server Level 1 report is available under /opt/Cornerstone_Tech
Support
Vendor support
For support inquiries, contact: support@cornerstonetechnologies.com
This AMI is offered as-is with basic email support available Monday to Friday, 8am to 5pm PST. Optional full-service management and support agreements are available on request.
Since 2007, Cornerstone Technologies has delivered intelligent, tailored IT solutions that help businesses operate securely and efficiently. Our expertise spans hybrid cloud migrations, cybersecurity, managed services, and advanced IT engineering. Trusted by industry leaders, we specialize in building scalable, secure, and resilient infrastructures.
Every project is approached with a commitment to listening, understanding, and executing with precision. Our mission is to ensure your data foundation is robust, future-ready, and aligned with your business vision.
For more information, visit:
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
This product has charges associated with it for seller support. Enterprise-grade Ubuntu 24.04 with pre-configured CIS Level 2 security controls. Deploy secure infrastructure in minutes, not days. Audit-ready & compliant.
This product has charges associated with it for seller support. Enterprise-grade Ubuntu 22.04 with pre-configured CIS Level 2 security controls. Deploy secure infrastructure in minutes, not days. Audit-ready & compliant.
This product has charges associated with it for seller support. Enterprise AlmaLinux 9 with CIS Level 2 hardening. 1:1 RHEL binary compatible, CloudLinux backed. Deploy secure, stable infrastructure instantly.
This product has charges associated with it for seller support. Enterprise-grade Rocky Linux 9 with CIS Level 2 hardening. RHEL-compatible security without the cost. Deploy compliant infrastructure instantly.
This distribution of Linux is based on Rocky Linux version 8.5 and is built and security hardened by OpenLogic by Perforce. It has been configured to conform to both PCI-DSS and CIS2 (Server) standards.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.