Sold by: Perimattic ManageStacks
Deployed on AWS
Production-ready HashiCorp Vault with full root access, automated setup, and security hardening - a self-hosted secrets management platform for API keys, credentials, and encryption on AWS.
Overview
This fully managed HashiCorp Vault solution delivers a production-ready secrets management platform on AWS, built on Ubuntu 24.04 LTS. Every instance is pre-configured with security best practices, optimized storage, and automated operations.
Key Features
Complete Secrets Management Vault pre-configured with secure storage backend, transit encryption engine, and PKI certificate management. Store and rotate API keys, database credentials, and certificates.
Automated Setup On first login, an interactive setup script initializes Vault, configures storage, sets up unseal keys, and applies firewall rules - all within minutes.
Security Hardened TLS encryption, audit logging, UFW firewall pre-configured to allow only SSH (22) and Vault (8200) from trusted sources, and latest security patches applied.
Dynamic Secrets Generate on-demand, short-lived credentials for databases, cloud providers, and SSH access. Eliminate static credential sprawl.
Use Cases API key and credential management for applications Database credential rotation and dynamic secrets PKI certificate management and TLS automation Encryption as a service for application data SSH certificate authority and access management Compliance-driven secrets management (SOC 2, PCI DSS)
Getting Started Launch the AMI from AWS Marketplace on your preferred instance type SSH into your instance and follow the interactive setup wizard Initialize Vault, store your first secret, and configure authentication
Book a free setup consultation at https://cal.com/gaurav-pareek-perimattic/marketplace-setup-consultations or email us at aws-support@perimattic.com .
Support Managed and supported by Perimattic, a cloud infrastructure company with 13+ years of experience serving global clients. We offer free setup assistance, custom integrations, infrastructure consulting, and 24/7 support.
Highlights
- Complete Secrets Management: Store, rotate, and manage API keys, database credentials, and certificates with dynamic secrets generation and transit encryption.
- Self-Hosted with Full Control: get complete OS-level access to configure secret engines, auth methods, audit backends, and policies without per-secret pricing.
- 24/7 Expert Support by Perimattic: 13+ years of cloud infrastructure expertise with free setup assistance, secrets architecture guidance, and dedicated support at aws-support@perimattic.com.
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
Ubuntu 24.04
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
t2.medium Recommended | $0.05 |
t2.large | $0.05 |
t2.xlarge | $0.05 |
t3.medium | $0.05 |
t3.large | $0.05 |
t3.xlarge | $0.05 |
m5.large | $0.05 |
m5.xlarge | $0.05 |
Dimensions summary
You pay by the hour based on the EC2 instance size that runs your managed secrets management deployment. Eight instance options span two general-purpose families, the t2 and t3 burstable series and the m5 series. Within each family, sizes step up from medium to large to xlarge, giving you more compute and memory as you move up. Your hourly rate scales with the instance size you select. This is usage-based billing, so charges accrue for the hours the instance runs. The managed service, provisioning, monitoring, backups, and updates apply across all instance choices.
Top-of-mind questions for buyers
Each instance choice includes the fully managed service. You get provisioning, SSL, monitoring, daily automated backups, one-click updates, and automatic security patches. Firewall rules, TLS encryption, and role-based access control apply too. The hourly rate covers this management layer regardless of which instance size you run.
Charges accrue for the hours the instance runs. A fully powered-off instance does not accrue software charges. Stopped or hibernated instances may still incur underlying AWS storage fees for attached volumes, but the software metering counts running time only.
The t2 and t3 series are burstable, giving baseline compute that can spike for short periods. They suit variable or lighter secrets management traffic. The m5 series is general-purpose with steady compute and memory, suited to continuous workloads. Your hourly rate rises as you move to larger sizes within any family.
perimattic.com
Helpful?
Vendor refund policy
For any questions or concerns, please contact: Perimattic.com Email: aws-support@perimattic.com
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
-
Initial release of HashiCorp Vault AMI with automated setup and secure configuration.
-
Added guided first-boot workflow for domain mapping and DNS validation.
-
Enabled automatic SSL certificate provisioning using Let's Encrypt via Apache.
-
Integrated Docker Compose deployment for consistent and maintainable Vault runtime.
-
Implemented Vault initialization with 5 unseal key shares and 3-key threshold.
-
Added automatic unseal script generation for simplified recovery operations.
-
Root token and unseal keys are securely stored in .env for administrator access.
-
Included failsafe script to ensure setup re-runs only when necessary.
-
Added cleanup routines to avoid stale Vault data or previous initialization artifacts.
-
Optimized startup flow with progress feedback and improved reliability after reboots.
Additional details
Usage instructions
-
Launch an Instance
From AWS Marketplace, click Continue to Subscribe and then Continue to Configuration to launch the AMI.
-
Choose the Recommended Instance Type
Select t2.medium or higher for stable performance.
-
Configure Security Group
Allow inbound traffic on the following ports:
- 22 (SSH) - For secure terminal access
- 80 (HTTP) - Required temporarily during SSL validation
- 443 (HTTPS) - To securely access the Vault web UI
- 8200 (Vault API) - Required if accessing Vault programmatically or via CLI/SDKs
-
Connect to the Instance
ssh -i <your-key.pem> ubuntu@<public-ip>
-
First-Boot Setup
On first run, the AMI performs a guided setup:
- Detects your server's public IP automatically
- Prompts you to enter your Vault domain (e.g., vault.example.com)
- Validates that the domain's A record points to this instance
- Requests your admin email (used for SSL certificate registration)
- Configures Apache reverse proxy for secure HTTPS access
- Automatically requests and installs a Let's Encrypt SSL certificate
Once complete, Vault initializes and generates:
- Unseal Keys
- Initial Root Token
-
Configure DNS
Before continuing setup, create this record at your DNS provider:
your domain name - A - <your-instance-public-IP>
The setup script will automatically detect DNS propagation.
-
Automatic SSL Setup
After DNS is confirmed:
- A free SSL certificate is issued by Let's Encrypt
- HTTPS is enabled and enforced
- Traffic is securely routed to the Vault service
-
Start or Restart Services Manually (if needed)
cd /opt/app docker compose ps docker compose restart
-
Access Vault Web UI
Open your browser and visit:
https://<your-domain>
-
Login Credentials & Unseal Keys
Your Vault initialization data is stored here:
cat /opt/app/.env
This includes:
- VAULT_ROOT_TOKEN
- VAULT_UNSEAL_KEY_1 VAULT_UNSEAL_KEY_5
Thank you for subscribing. Your instance is ready to go!
Need Support or Customization? Whether you're facing setup issues or need custom features, Perimattic's expert team is here to help:
Email us: aws-support@perimattic.com WhatsApp: +91-92142 66896 Learn more: <www.perimattic.com >
We offer: Free setup assistance Custom development & integrations Infrastructure consulting Automation & AI solutions With 13+ years of experience serving global clients, we ensure your deployment runs smoothly and scales with your needs.
Let's build something great together!
Resources
Support
Vendor support
Support by Perimattic
Perimattic provides 24/7 support for all AWS Marketplace products. Our team has 13+ years of cloud infrastructure expertise serving global clients.
Contact Channels: Email: aws-support@perimattic.com WhatsApp: +91-92142 66896 Website: <www.perimattic.com >
What We Help With: Initial setup and configuration assistance (free) Troubleshooting connectivity, performance, and backup issues Custom development and integrations Infrastructure consulting and architecture review Migration planning from other solutions Automation solutions and scaling guidance
Instance Sizing Guidance: t2.medium or t3.medium: Development environments, small applications m5.large: Production workloads with moderate traffic m5.xlarge: High-traffic production deployments and larger datasets
For workload-specific sizing recommendations, contact our team for a free consultation.
Refunds and Issues: If you experience any issues or need to request a refund, contact us at aws-support@perimattic.com and we will respond promptly.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Production-ready HashiCorp Vault with full root access, automated setup, and security hardening - a self-hosted secrets management platform for API keys, credentials, and encryption on AWS.
Perimattic provides 24x7 DevOps managed services on AWS - CI/CD operations, Kubernetes management, infrastructure automation, monitoring, and incident response for production workloads.
Production-ready ClickHouse with full root access, automated backups, and security hardening - a high-performance columnar database for real-time analytics on AWS.
Production-ready Neo4j with full root access, automated backups, and security hardening - a self-hosted graph database for knowledge graphs, recommendation engines, and network analysis on AWS.
Production-ready Neo4j with full root access, automated backups, and security hardening - a self-hosted graph database for knowledge graphs, recommendation engines, and network analysis on AWS.
Production-ready Neo4j with full root access, automated backups, and security hardening - a self-hosted graph database for knowledge graphs, recommendation engines, and network analysis on AWS.
Production-ready ClickHouse with full root access, automated backups, and security hardening - a high-performance columnar database for real-time analytics on AWS.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.