Production-ready SonarQube with full root access, automated configuration, and security hardening - a self-hosted code quality and security analysis platform on AWS.
This fully managed SonarQube solution delivers a production-ready code quality and security analysis platform on AWS, built on Ubuntu 24.04 LTS. Every instance is pre-configured with security best practices, optimized settings, and automated operations.
Key Features
Complete Code Quality Platform
SonarQube pre-configured with quality profiles for 30+ programming languages. Detect bugs, code smells, security vulnerabilities, and technical debt across your codebase.
Automated Setup
On first login, an interactive setup script configures SonarQube, sets up the database, and applies firewall rules - all within minutes.
Security Hardened
UFW firewall pre-configured, HTTPS-ready, authentication enabled by default, and latest security patches applied.
CI/CD Integration Ready
Integrate with Jenkins, GitLab CI, GitHub Actions, Azure DevOps, and Bitbucket Pipelines. Enforce quality gates before merging code.
Use Cases
Continuous code quality inspection in CI/CD pipelines
Security vulnerability detection (OWASP Top 10, CWE)
Technical debt tracking and reduction
Code review automation and quality gate enforcement
Compliance-driven code analysis (MISRA, CERT)
Multi-project portfolio quality management
Getting Started
Launch the AMI from AWS Marketplace on your preferred instance type
SSH into your instance and follow the interactive setup wizard
Integrate SonarQube with your CI/CD pipeline and start analyzing code
Support
Managed and supported by Perimattic, a cloud infrastructure company with 13+ years of experience serving global clients. We offer free setup assistance, custom integrations, infrastructure consulting, and 24/7 support.
Highlights
Self-Hosted Code Quality Platform: Full root access to configure quality profiles, security rules, and plugins for 30+ languages without per-user pricing or data residency concerns.
CI/CD Integration Ready: Pre-configured for Jenkins, GitLab CI, GitHub Actions, and Azure DevOps. Enforce quality gates and catch vulnerabilities before merging code.
24/7 Expert Support by Perimattic: 13+ years of cloud infrastructure expertise with free setup assistance, pipeline integration, and dedicated support at aws-support@perimattic.com.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
You pay by the hour for the AWS EC2 instance that runs your managed SonarQube deployment. The eight options are all instance sizes, not feature tiers. They fall into two families: burstable instances (t2 and t3) and general-purpose instances (m5). Within each family, you scale up from medium to large to xlarge as your compute and memory needs grow. Every instance includes the same managed service: provisioning, monitoring, backups, updates, and security patches. Billing runs through your existing AWS account, so charges appear on your AWS invoice. Choose the instance size that matches your workload.
Top-of-mind questions for buyers
What do the t2, t3, and m5 instance types mean for my SonarQube deployment?
Each option maps to an AWS EC2 instance size that runs your SonarQube server. The t2 and t3 families are burstable instances suited to variable analysis loads. The m5 family gives steady general-purpose compute for consistent workloads. Within each family, medium, large, and xlarge add more CPU and memory.
Am I charged when the SonarQube instance is stopped or idle?
Billing meters running instance-hours. A fully stopped instance does not accrue hourly software charges. Underlying AWS storage or other resources tied to the instance may still incur separate AWS fees. The software charge you see here tracks active running time only.
If I outgrow my current instance size, how does cost change?
You move to a different instance option and pay that option's hourly rate for the hours it runs. The change is not automatic; you select a size and the managed service redeploys. Each size includes the same managed provisioning, monitoring, backups, updates, and security patches.
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Added automated first-boot provisioning using failsafe.sh to guarantee complete and reliable SonarQube installation.
Implemented secure SonarQube setup with auto-generated admin credentials stored safely inside the .env file.
Added mandatory domain validation workflow with guided prompts during first boot.
Fully automated SSL certificate provisioning using Certbot with Apache/Nginx reverse proxy integration.
Enabled SonarQube Web Dashboard with secure HTTPS routing for code quality and vulnerability analysis.
Delivered Docker Compose-based deployment for consistent, reproducible production environments.
Configured persistent data volumes to ensure SonarQube project data, plugins, and logs remain intact across reboots.
Added auto-restart policies for SonarQube and database containers to improve reliability and uptime.
Enhanced DNS validation logic to prevent SSL certificate failures during domain mapping.
Integrated a self-healing installer that retries failed steps to guarantee successful provisioning even after interruptions.
Additional details
Usage instructions
1.Launch an Instance
From AWS Marketplace, select Continue to Subscribe, then Continue to Configuration, and launch the AMI into your preferred VPC and subnet.
2.Choose the Recommended Instance Type
Select t2.medium or larger for smooth SonarQube operation.
SonarQube and PostgreSQL require adequate CPU and RAM.
For CI/CD or teams of 5 or more developers, consider t3.medium or t3.large.
3.Configure Security Group
Allow inbound access on these ports:
22 - SSH access
80 - Required temporarily for SSL validation
443 - Secure HTTPS access to SonarQube
These ports are required for first-boot automation, certificate generation, and dashboard access.
4.Connect to the Instance
SSH into your server:
ssh -i <your-key.pem> ubuntu@<public-ip>
The automated first-boot setup will begin immediately after login.
We offer:
Free setup assistance
Custom development & integrations
Infrastructure consulting
Automation & AI solutions
With 13+ years of experience serving global clients, we ensure your deployment runs smoothly and scales with your needs.
What We Help With:
Initial setup and configuration assistance (free)
Troubleshooting connectivity, performance, and backup issues
Custom development and integrations
Infrastructure consulting and architecture review
Migration planning from other solutions
Automation solutions and scaling guidance
Instance Sizing Guidance:
t2.medium or t3.medium: Development environments, small applications
m5.large: Production workloads with moderate traffic
m5.xlarge: High-traffic production deployments and larger datasets
For workload-specific sizing recommendations, contact our team for a free consultation.
Refunds and Issues:
If you experience any issues or need to request a refund, contact us at aws-support@perimattic.com and we will respond promptly.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Production-ready SonarQube with full root access, automated configuration, and security hardening - a self-hosted code quality and security analysis platform on AWS.
Production-ready ClickHouse with full root access, automated backups, and security hardening - a high-performance columnar database for real-time analytics on AWS.
Production-ready Neo4j with full root access, automated backups, and security hardening - a self-hosted graph database for knowledge graphs, recommendation engines, and network analysis on AWS.
Production-ready Neo4j with full root access, automated backups, and security hardening - a self-hosted graph database for knowledge graphs, recommendation engines, and network analysis on AWS.
Production-ready Neo4j with full root access, automated backups, and security hardening - a self-hosted graph database for knowledge graphs, recommendation engines, and network analysis on AWS.
Production-ready ClickHouse with full root access, automated backups, and security hardening - a high-performance columnar database for real-time analytics on AWS.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.