Listing Thumbnail

    CentOS Stream 10 Hardened

     Info
    Sold by: EASYCLOUD 
    Deployed on AWS
    AWS Free Tier
    This is a repackaged open source software product wherein additional charges apply for a pre-hardened, AWS-optimized image with verification reports and maintenance. This AMI delivers CentOS Stream 10 hardened and tuned for EC2 by Easycloud-with security scan reports and SBOM.

    Overview

    This is a repackaged open source software product wherein additional charges apply for a pre-hardened, AWS-optimized image with verifiable evidence and maintenance. Based on CentOS Stream 10, this AMI is hardened, tuned for Amazon EC2 workloads, and equipped with a complete evidence pack and Software Bill of Materials (SBOM).

    Value-Added Features

    Security:

    1. Security Hardening: SELinux enforcing with the targeted policy, ICMP redirects disabled, unused kernel modules blocked, and a shorter SSH login window.

    2. Fully Patched at Release: Zero packages with a pending update at build time, verified. The complete CVE scan ships inside the image.

    3. Comprehensive Evidence Pack: Every AMI includes an evidence pack located under /opt/optimization-report/:

      • Tuning_Parameters.txt: Every performance tuning parameter, each shown against the CentOS Stream default, with how to undo it.
      • Security_Parameters.txt: SELinux and every security setting, each shown against the CentOS Stream default, with how to undo it.
      • sbom.spdx.json: Software Bill of Materials (SBOM) in SPDX format generated from the RPM database.
      • cve_scan.txt / cve_scan_full.txt.gz: Vulnerability scan reports categorizing CVEs by upstream patch availability.
      • key_files.sha256: SHA-256 checksums of the key configuration files described in the reports, so the delivered state can be verified.
      • README.txt: Index file detailing artifact contents, administrative operational guidelines, and configuration defaults.

    System Footprint & Reliability Optimization:

    1. Minimal Footprint: Built on a minimal OS installation to reduce the attack surface and remove unnecessary packages.

    2. Storage Layout: Configured with a streamlined 10 GB root (/) partition layout to minimize disk footprint while ensuring core system operation.

    3. Validation Testing: Functional verification conducted on clean AMI launches through multi-round integration testing, verifying complete software lifecycle operations with SELinux enforcing.

    AWS Network & Kernel Tuning:

    1. Network Stack: TCP BBR congestion control with fair queueing, increased connection backlogs, buffer adjustments, and MTU probing enabled.

    2. System Tuning: Red Hat tuned daemon active with a custom cloud profile, custom transparent hugepages (madvise), and modified memory/EBS writeback parameters.

    3. EC2 Integration: Configured with NVMe I/O timeouts, Amazon Time Sync (chrony), IRQ balance daemon, and size-capped persistent journald logging.

    Operational Tools

    1. Preinstalled Tools: AWS SSM Session Manager enabled, CloudWatch Agent installed (disabled by default).

    Maintenance:

    1. Maintenance Specifications: Rebuilt and updated bi-weekly to monthly incorporating upstream CentOS Stream 10 security updates, updated artifact documentation per release, and administrative documentation.

    About CentOS Stream 10

    1. CentOS Stream 10 Foundation: Provides a robust, enterprise-grade underlying OS with deep structural alignment to RHEL, ensuring high security and seamless ecosystem compatibility with AlmaLinux, Rocky Linux, and traditional CentOS deployments.

    2. Next-Generation RHEL Platform: CentOS Stream 10 tracks the leading edge of the RHEL 10 development branch, giving teams early access to the same packages that will ship in future RHEL 10 point releases. This provides a predictable upgrade path and broad compatibility with the Red Hat software ecosystem across development, staging, and production workloads.

    3. Ideal Foundation for Modern Cloud Infrastructure: By starting with a bloat-free CentOS Stream 10 minimal installation, maximum CPU and memory are dedicated entirely to your own workloads. This makes it the perfect, conflict-free foundation for web and application hosting including Nginx, Apache HTTPD, Apache Tomcat, HAProxy, and WordPress, as well as data layers built on MySQL, MariaDB, PostgreSQL, Redis, and Elasticsearch. It seamlessly integrates with modern runtimes and container platforms (Python, Node.js, OpenJDK, Docker, Kubernetes), and serves as a rock-solid backbone for DevOps and observability stacks (Jenkins, HashiCorp Vault, Grafana, Prometheus, RabbitMQ), ensuring your enterprise Linux infrastructure scales without limits.

    Highlights

    • Hardened Base: Pre-configured with SELinux enforcing, network kernel parameter hardening, kernel module blocklists, and SSH hardening out of the box.
    • Comprehensive Security Reports & SBOM: Includes verifiable configuration reports and a complete Software Bill of Materials (SBOM), enabling instant verification of the delivered settings and rapid vulnerability assessments out-of-the-box.
    • AWS Performance Tuning & Regular Updates: Optimised for EC2 with TCP BBR and Red Hat tuned cloud profiles, updated bi-weekly to monthly with upstream security patches.

    Details

    Delivery method

    Delivery option
    64-bit (x86) Amazon Machine Image (AMI)

    Latest version

    Operating system
    CentOs CentOS Stream 10

    Deployed on AWS
    New

    Introducing multi-product solutions

    You can now purchase comprehensive solutions tailored to use cases and industries.

    Multi-product solutions

    Features and programs

    Financing for AWS Marketplace purchases

    AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
    Financing for AWS Marketplace purchases

    Pricing

    CentOS Stream 10 Hardened

     Info
    Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
    Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator  to estimate your infrastructure costs.
    If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier  for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier  for more details.

    Usage costs (791)

     Info
    • ...
    Dimension
    Cost/hour
    t3.medium
    Recommended
    $0.04
    t2.micro
    $0.03
    t3.micro
    $0.03
    t2.nano
    $0.00
    t3.nano
    $0.00
    t3a.nano
    $0.00
    t1.micro
    $0.03
    t3a.micro
    $0.03
    m1.small
    $0.04
    t2.small
    $0.04

    AI Insights

     Info

    Dimensions summary

    You pay by the hour for a hardened CentOS Stream 10 image. Pricing is usage-based, so you are billed only for the hours each instance runs. The one price variable is the EC2 instance type you choose. Each listed dimension maps to a specific instance type, grouped by family (such as t, c, m, r, g, and x) and by size (nano through 48xlarge, plus bare metal). Larger instances carry more compute, memory, or storage, so their hourly rate rises accordingly. You can run any instance type that fits your workload.

    Top-of-mind questions for buyers

    Each dimension maps to one running EC2 instance of that type. The instance type sets the CPU, memory, storage, and network capacity. Compute-optimized families (c) favor processing, memory families (r, x) favor RAM, and general families (m, t) balance both. The hardened CentOS Stream 10 image runs on whichever type you select.
    The software charge meters running hours only. A stopped or paused instance does not accrue the hourly software fee. You may still pay underlying AWS fees for attached storage or reserved resources, but those are separate from this listing's hourly software rate.
    The hourly rate covers the hardened CentOS Stream 10 image for your chosen instance type. Add-on offerings such as compliance tuning, baseline management, and endpoint protection are described as separate professional services, not part of the per-hour image price. Contact the vendor for details on those services.
    www.easyclouds.io
    Helpful?

    Vendor refund policy

    No refunds. Cancel anytime.

    How can we make this page better?

    Tell us how we can improve this page, or report an issue with this product.
    Tell us how we can improve this page, or report an issue with this product.

    Legal

    Vendor terms and conditions

    Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .

    Content disclaimer

    Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.

    Usage information

     Info

    Delivery details

    64-bit (x86) Amazon Machine Image (AMI)

    Amazon Machine Image (AMI)

    An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.

    Version release notes

    Latest Updates

    Additional details

    Usage instructions

    Connection Methods:

    Once launched, SSH into the instance ,The default username is ec2-user. You can switch to the root user environment by running sudo su -.

    Firewall Configuration

    • SSH (Port 22): Required for initial system access.

    • Security Recommendation: For production environments, strictly limit SSH access to trusted IP addresses only via AWS Security Groups.

    Support

    Vendor support

    Should you encounter any issues while using the system, please do not hesitate to contact us via email at: support@easyclouds.io ,Thank you!

    AWS infrastructure support

    AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.

    Similar products

    Customer reviews

    Ratings and reviews

     Info
    0 ratings
    5 star
    4 star
    3 star
    2 star
    1 star
    0%
    0%
    0%
    0%
    0%
    0 reviews
    No customer reviews yet
    Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.