Sold by: CrowdStrike
Deployed on AWS
AWS Free Tier
Automate CrowdStrike Falcon sensor installation and configuration in your EC2 Image Builder AMI creation pipeline.
4.5
Overview
The CrowdStrike Falcon EC2 Image Builder Component streamlines security implementation by automating the installation and configuration of the CrowdStrike Falcon sensor during AMI creation. This reusable template integrates seamlessly with EC2 Image Builder, ensuring consistent security deployment across your AWS infrastructure.
Key Implementation Requirements:
- Component should be executed as the final step in your image pipeline
For detailed implementation guidance and component source code, visit our GitHub repository: https://github.com/CrowdStrike/aws-ec2-image-builder
Highlights
- Deploy Falcon sensor automatically during image creation
- Configure Falcon security settings consistently across images
- Integrate CrowdStrike protection from the first boot
Details
Sold by
Categories
Delivery method
Supported services
Delivery option
Latest version
Operating system
Linux
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Trust Center
Access real-time vendor security and compliance information through their Trust Center powered by Drata or Vanta. Review certifications and security standards before purchase.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
This product is available free of charge. Free subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier for more details.
Dimensions summary
You deploy the Falcon Sensor at no software charge, so pricing is set to zero across every dimension. Each dimension maps to a specific AWS EC2 instance type, billed hourly (Hrs). The list spans general-purpose, compute-, memory-, and storage-optimized families, plus GPU, machine learning, and bare-metal options, in sizes from nano and medium up to metal and 48xlarge. You pick the dimension that matches the instance the sensor runs on. Since the sensor is free, your cost tracks only your underlying AWS EC2 usage, not the sensor itself.
Top-of-mind questions for buyers
Each dimension maps to a specific AWS EC2 instance type, such as m5.large or r6g.2xlarge. You select the dimension that matches the instance the Falcon Sensor runs on. Billing is measured in hours (Hrs) for that instance type. The sensor software itself carries no charge across every dimension.
The sensor software price is set to zero across every dimension, so no software charge accrues whether the instance runs or is stopped. Your cost tracks only your underlying AWS EC2 usage. A stopped instance stops EC2 compute charges, though AWS storage fees may still apply separately.
The Falcon platform supports Windows, macOS, and Linux operating systems. This lets you match the sensor to the workload running on your chosen EC2 instance type. For a full list of supported versions, check the vendor platform FAQ page.
www.crowdstrike.com
Helpful?
Vendor refund policy
All Orders are non-cancellable and all fees and other amounts you pay under this Agreement are non-refundable.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Linux v1.2.3
Supported services:
- Amazon EC2 Image Builder
EC2 Image Builder Component
EC2 Image Builder is a fully managed AWS service. It automates creation, management, and deployment of custom, secure, and up-to-date server images. After procurement, use the EC2 Image Builder console/API to include this third-party component in golden images for future EC2 instances.
Version release notes
Additional details
Usage instructions
Support
Vendor support
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
The industry's most complete cloud-native application protection platform (CNAPP) with unified visibility across your apps, clusters, and clouds.
Deploy end-to-end CrowdStrike Falcon Cloud Security across AWS accounts, EKS clusters, and ECS workloads. Includes runtime protection, admission control, image assessment, and full cloud visibility.
Rapid endpoint security posture review using the CrowdStrike Falcon platform, with findings in 1–2 weeks. We deploy the Falcon sensor across a representative endpoint sample, assess posture, surface exposed vulnerabilities and passive threat indicators, and deliver prioritized remediation guidance. Full Falcon platform access at no platform cost for the engagement.
Close the gap in Endpoint Detection & Response (EDR) and Next Gen AV capability by leveraging CrowdStrike's Next Gen EDR/AV solution deployed across your businesses' endpoints by Sekuro's professional services team.
More info about [CrowdStrike](https://www.crowdstrike.com/).
Customer reviews
Arab S.
Strong, Comprehensive Cloud Security with Simple Management
Reviewed on Aug 15, 2026
Review provided by G2
What do you like best about the product?
What I like most about CrowdStrike Falcon Cloud Security is that it provides strong and comprehensive security while keeping things simple to manage. I like its ability to give organizations better visibility into their cloud environment, detect threats quickly, and help protect data and applications. It also helps reduce security risks and makes it easier for teams to manage cloud security from one platform.
What do you dislike about the product?
The main downside is that it can take some time to learn and configure, especially for users who are new to cloud security. The pricing can also be a little high for smaller organizations. Apart from that, I have not found any major issues with the product.
What problems is the product solving and how is that benefiting you?
CrowdStrike Falcon Cloud Security helps solve common challenges like detecting threats, protecting cloud workloads and data, and improving visibility across the cloud environment. It helps me identify potential security risks faster and manage security from a single platform. This saves time, reduces manual effort, and gives me more confidence that the cloud environment is being monitored and protected.
Suhail D.
Strong Cloud Security Visibility and Risk Management
Reviewed on Aug 13, 2026
Review provided by G2
What do you like best about the product?
It gives me a clear view of cloud security risks and makes it easier to identify and respond to threats from one place. I particularly like the visibility across cloud environments and the practical security insights without making the workflow unnecessarily complicated.
What do you dislike about the product?
The platform can feel complex at first, especially for users who are new to cloud security. Some features also require time to configure and understand properly, and the amount of information presented can sometimes make it harder to quickly identify the most important issues.
What problems is the product solving and how is that benefiting you?
It helps identify cloud security risks, misconfigurations, and potential threats before they become bigger problems. The main benefit is better visibility across the cloud environment, which makes it easier to prioritize risks and respond to security issues more efficiently.
Oil & Energy
Seamless, Lightweight Protection with Real-Time Visibility and Fast Threat Detection
Reviewed on Aug 12, 2026
Review provided by G2
What do you like best about the product?
The lightweight Falcon agent operates seamlessly without impacting endpoint performance or system resources. Its cloud-native architecture provides real-time visibility, fast threat detection, and advanced telemetry across our infrastructure. The threat hunting capabilities and centralized dashboard simplify incident response immensely.
What do you dislike about the product?
The granular policy configuration options and rich feature set require a brief learning curve during initial onboarding. Additionally, advanced modules and premium threat intelligence feeds can add up in cost, though the protection and peace of mind completely justify the investment."
What problems is the product solving and how is that benefiting you?
It eliminates visibility gaps across our endpoints and protects our environment against zero-day malware, ransomware, and fileless attacks. Having continuous monitoring and automated threat containment reduces our team's mean time to respond (MTTR) and prevents potential security breaches.
Angélica M.
Risk detection and multi-cloud protection on a single platform
Reviewed on Aug 11, 2026
Review provided by G2
What do you like best about the product?
Risk detection and protection of multiple cloud environments in a single platform.
What do you dislike about the product?
It may be more expensive than some competing options, especially for large organizations or those with many cloud resources, and although the interface is user-friendly, taking full advantage of all the advanced features requires training and experience.
What problems is the product solving and how is that benefiting you?
Real-time vulnerability detection allows for early action against exposure to risks.
Blessing M.
Top Notch Extended Endpoint Detection Plan with Real-Time Monitoring
Reviewed on Aug 11, 2026
Review provided by G2
What do you like best about the product?
It provides best security in all scale of businesses it has Extended Detect response planning, accurate real time and audit monitoring, It needs crucial management soon as it is implemented otherwise systems can be locked out and restoring them can be complex
What do you dislike about the product?
It sends false alerts to users, which can be alarming. It also requires hands-on administrative management. I’ve experienced disk and operating system locks that can force a machine reload and may lead to possible data loss.
What problems is the product solving and how is that benefiting you?
When configured correctly, unrestricted activities on the system are blocked instantly. The warnings and real-time monitoring for the endpoint detection and response plan can be helpful for immediately mitigating any issues as they arise.