The CrowdStrike Falcon EC2 Image Builder Component streamlines security implementation by automating the installation and configuration of the CrowdStrike Falcon sensor during AMI creation. This reusable template integrates seamlessly with EC2 Image Builder, ensuring consistent security deployment across your AWS infrastructure.
Key Implementation Requirements:
Component should be executed as the final step in your image pipeline
Access real-time vendor security and compliance information through their Trust Center powered by Drata or Vanta. Review certifications and security standards before purchase.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
This product is available free of charge. Free subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier for more details.
You deploy the Falcon Sensor at no software charge, so pricing is set to zero across every dimension. Each dimension maps to a specific AWS EC2 instance type, billed hourly (Hrs). The list spans general-purpose, compute-, memory-, and storage-optimized families, plus GPU, machine learning, and bare-metal options, in sizes from nano and medium up to metal and 48xlarge. You pick the dimension that matches the instance the sensor runs on. Since the sensor is free, your cost tracks only your underlying AWS EC2 usage, not the sensor itself.
Top-of-mind questions for buyers
What does one hourly dimension map to for billing?
Each dimension maps to a specific AWS EC2 instance type, such as m5.large or r6g.2xlarge. You select the dimension that matches the instance the Falcon Sensor runs on. Billing is measured in hours (Hrs) for that instance type. The sensor software itself carries no charge across every dimension.
Am I charged for the Falcon Sensor when my EC2 instance is stopped?
The sensor software price is set to zero across every dimension, so no software charge accrues whether the instance runs or is stopped. Your cost tracks only your underlying AWS EC2 usage. A stopped instance stops EC2 compute charges, though AWS storage fees may still apply separately.
What operating systems does the Falcon Sensor support once deployed?
The Falcon platform supports Windows, macOS, and Linux operating systems. This lets you match the sensor to the workload running on your chosen EC2 instance type. For a full list of supported versions, check the vendor platform FAQ page.
www.crowdstrike.com
Helpful?
Vendor refund policy
All Orders are non-cancellable and all fees and other amounts you pay under this Agreement are non-refundable.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
EC2 Image Builder is a fully managed AWS service. It automates creation, management, and deployment of custom, secure, and up-to-date server images. After procurement, use the EC2 Image Builder console/API to include this third-party component in golden images for future EC2 instances.
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Transform your AWS security operations with Falcon Next-Gen SIEM. Stop threats fast with unified visibility across AWS security tools and your security ecosystem. Prioritize the alerts that matter most and streamline investigations with automation and AI. Meet key compliance requirements with prebuilt dashboards and log retention. Get started in minutes with automated onboarding and flexible, pay-as-you-go consumption billing.
The AI-native CrowdStrike Falcon Platform provides comprehensive protection across all areas of enterprise risk - devices, identities, data, endpoints and cloud. Powered by a single agent, crowdsourced data, expert threat intelligence, and advanced AI, the Falcon Platform simplifies security operations and stops breaches.
falcon-mcp enables seamless communication between AI agents and the CrowdStrike Falcon platform. Deployable directly onto Amazon Bedrock AgentCore, it provides programmatic access to Falcon data for agentic workflows and accelerating AI-native security automation.
Seamless Multi-Cloud Security with Powerful Threat Intelligence
Reviewed on Aug 24, 2026
Review provided by G2
What do you like best about the product?
I love the seamless integration and the intuitive dashboard of CrowdStrike Falcon Cloud Security. Its powerful threat intelligence provides real-time visibility across multi-cloud environments without slowing down our infrastructure. The product streamlines our security workflows and reduces reaction time to critical alerts. It saves significant team effort by eliminating the need to manage multiple disconnected security tools across our clouds. The initial setup was very straightforward and easy to deploy, thanks to the cloud-native agent and automated integration templates that made the initial setup fast with minimal hassle.
What do you dislike about the product?
I find the licensing cost to be relatively high, and the documentation for advanced custom configurations could be more streamlined and easier to navigate. Adding step-by-step configuration templates, more real-world use cases, and short video walkthroughs would make the documentation much easier to search and implement.
What problems is the product solving and how is that benefiting you?
I use CrowdStrike Falcon Cloud Security for real-time protection of our multicloud environments, preventing cloud misconfiguration, and streamlining compliance monitoring. It reduces alert fatigue, enhances threat detection, integrates seamlessly, and saves team effort by consolidating security tools.
Consumer Electronics
Meets data security purpose and protecting against cyber threats
Reviewed on Aug 23, 2026
Review provided by G2
What do you like best about the product?
Data security is the main purpose, and the software fully meets that purpose.
What do you dislike about the product?
So far, I haven’t found any major issues. If anything comes up, I can report it.
What problems is the product solving and how is that benefiting you?
The main problem it solves is protecting against cyber threats.
Information Services
Unified Falcon Agent and Strong Visibility, but Pricing and Licensing Feel Complex
Reviewed on Aug 21, 2026
Review provided by G2
What do you like best about the product?
The unified, single-agent architecture is the biggest advantage for me: the same Falcon sensor extends from endpoints to cloud workloads and containers, which removes the overhead of deploying and managing separate agents. Threat Graph then correlates endpoint, identity, and cloud telemetry into unified detections, giving a clearer view across the entire attack surface.
What do you dislike about the product?
Pricing is my biggest issue. It’s noticeably higher than many competitors, and the costs for individual modules add up fast, which can make it hard for smaller organizations to justify or afford. On top of that, the licensing feels overly complex, and the lack of clear, transparent pricing for enterprise tiers only adds to the frustration.
What problems is the product solving and how is that benefiting you?
Falcon Cloud Security addresses the critical issue of fragmented cloud security tools by bringing CSPM, CWPP, CDR, and CIEM together in a single CNAPP platform. By consolidating these capabilities, it reduces the complexity and cost of managing multiple point products
Amos S.
Helps Security Teams Identify Vulnerabilities and Respond to Threats Fast
Reviewed on Aug 20, 2026
Review provided by G2
What do you like best about the product?
It helps security teams quickly identify vulnerabilities, monitor activity, and respond to threats in a timely, effective way.
What do you dislike about the product?
It feels complex to use, and I get a high number of security notifications and alerts.
What problems is the product solving and how is that benefiting you?
It reduces the time I spend investigating risks and improves my ability to respond quickly to threats.
Kanga Y.
Unified Cloud Visibility and Real-Time Threat Detection in One Falcon Platform
Reviewed on Aug 20, 2026
Review provided by G2
What do you like best about the product?
What I like best about CrowdStrike Falcon Cloud Security is its unified approach to cloud security. It provides strong visibility across cloud environments, helps identify misconfigurations and vulnerabilities, and makes it easier to prioritise risks from one platform. The real-time threat detection and integration with the broader Falcon platform are also valuable, especially for teams looking to reduce the number of separate security tools they need to manage.
What do you dislike about the product?
One downside of CrowdStrike Falcon Cloud Security is that it can feel complex at first, especially for teams that are new to the Falcon platform. There can be a learning curve when configuring policies and navigating some of the more advanced features. Pricing can also be relatively high compared with simpler cloud security solutions, particularly for smaller organisations.
What problems is the product solving and how is that benefiting you?
CrowdStrike Falcon Cloud Security helps solve challenges around cloud visibility, misconfigurations, vulnerabilities, and potential security threats across cloud environments. It gives us a more centralised view of risks and helps prioritise the issues that need attention first. This saves time for the security team, reduces manual monitoring, and allows us to identify and respond to potential threats more quickly.