Madarson IT Hardened Ubuntu 22.04 LTS DISA STIG AMI

This is a repackaged software product wherein additional charges apply for DISA STIG security hardening.

Deploy a pre-hardened Ubuntu 22.04 LTS instance on AWS with DISA STIG security controls already applied. Built by Madarson IT - a security-focused vendor publishing hardened and custom images across AWS, GCP, and Azure Marketplaces - this AMI eliminates weeks of manual hardening so your team can focus on achieving Authority to Operate (ATO) faster.

• Pre-applied DISA STIG controls for Ubuntu 22.04 LTS, covering operating system-level configuration, access controls, auditing, and encryption settings
• Ready-to-scan image compatible with OpenSCAP and SCAP Compliance Checker (SCC) for immediate compliance validation
• Regular updates aligned with new STIG releases and Ubuntu security patches
• Production-ready configuration that works out of the box on AWS EC2

A defense contractor or federal agency deploying workloads on AWS can launch this hardened AMI, run an automated SCAP scan to validate STIG compliance, and submit results as part of their eMASS or ATO documentation package. Instead of spending days manually applying hundreds of STIG controls to a vanilla Ubuntu image, teams start with a compliant baseline and address only the residual findings specific to their environment.

• Standardized Hardening: System-level STIG controls are pre-configured including file permissions, audit logging, password policies, kernel parameters, and network settings per DISA guidelines
• Compliance Validation Support: The image is built to produce favorable results when scanned with DISA-approved tools such as OpenSCAP or SCC, helping you document your security posture for auditors
• Continuous Maintenance: Madarson IT republishes updated images to reflect new STIG benchmark versions and critical Ubuntu security advisories

1. Subscribe to this AMI on AWS Marketplace
2. Launch an EC2 instance using the AMI
3. Connect via SSH using your configured key pair
4. Run an OpenSCAP or SCC scan to validate STIG compliance
5. Address any environment-specific residual findings
6. Document results for your ATO or compliance package

• This is a repackaged software product with additional charges for DISA STIG security hardening.
• This AMI addresses operating system-level STIG controls for Ubuntu 22.04 LTS. Application-layer STIGs (e.g., web server, database) require separate hardening by the buyer.
• Achieving formal ATO requires additional organizational steps beyond deploying a hardened image, including risk assessment, system security plan documentation, and assessor review.
• Buyers should run their own SCAP scan post-launch to validate compliance in their specific environment and document results for their accreditation package.
• Buyers should verify compatibility with their target EC2 instance types before deploying at scale.

Madarson IT certified images are always up to date, secure, follow industry standards, and are built to work right out of the box. Our DISA STIG-hardened images help organizations meet federal cybersecurity requirements efficiently and reliably.

Canonical Ltd. holds the trademarks for Ubuntu and associated branding. Madarson IT does not provide commercial licenses for Ubuntu products.