Production-ready Grafana with Prometheus, full root access, and security hardening - a self-hosted observability stack for teams needing complete control over monitoring and dashboards on AWS.
This fully managed Grafana with Prometheus solution delivers a production-ready observability stack on AWS, built on Ubuntu 24.04 LTS. Every instance is pre-configured with both Grafana and Prometheus, security best practices, and automated operations.
Why Choose Self-Hosted Grafana + Prometheus?
Unlike managed observability services like Amazon Managed Grafana, this AMI gives you full root and OS-level access. Configure unlimited dashboards, data sources, alerting rules, and plugins without user-based or dashboard-based pricing. Full control over data retention and storage.
Key Features
Integrated Observability Stack
Grafana and Prometheus pre-configured and connected. Create dashboards, set up alerts, and visualize metrics immediately after setup.
Automated Setup
On first login, an interactive setup script configures both Grafana and Prometheus, sets up data source connections, and applies firewall rules - all within minutes.
Security Hardened
UFW firewall pre-configured, HTTPS-ready, authentication enabled by default, and latest security patches applied.
Extensible Platform
Add Node Exporter, cAdvisor, Loki for logs, Tempo for traces, and hundreds of Grafana plugins. Build a complete observability platform.
Use Cases
Infrastructure monitoring dashboards and alerting
Application performance monitoring with custom metrics
Kubernetes cluster observability
Business metrics dashboards and KPI tracking
SLA monitoring and incident management
Multi-team shared observability platform
Getting Started
Launch the AMI from AWS Marketplace on your preferred instance type
SSH into your instance and follow the interactive setup wizard
Access Grafana dashboard, configure data sources, and start building visualizations
Support
Managed and supported by Perimattic, a cloud infrastructure company with 13+ years of experience serving global clients. We offer free setup assistance, custom integrations, infrastructure consulting, and 24/7 support.
Highlights
Integrated Grafana + Prometheus Stack: Both tools pre-configured and connected with unlimited dashboards, data sources, and alerting rules without per-user or per-dashboard pricing.
Extensible Observability Platform: Add Node Exporter, Loki for logs, Tempo for traces, and hundreds of Grafana plugins to build a complete monitoring solution.
24/7 Expert Support by Perimattic: 13+ years of cloud infrastructure expertise with free setup assistance, dashboard configuration, and dedicated support at aws-support@perimattic.com.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
You pay by the hour based on the AWS EC2 instance size you run this observability stack on. The eight options fall into three instance families: t2 (t2.medium, t2.large, t2.xlarge), t3 (t3.medium, t3.large, t3.xlarge), and m5 (m5.large, m5.xlarge). Within each family, cost rises as you move from medium to large to xlarge, reflecting more compute and memory. Pricing is usage-based, so you only pay for the hours your chosen instance runs. Billing flows through your existing AWS account.
Top-of-mind questions for buyers
What resources do I get for each hourly instance option?
Each option maps to an AWS EC2 instance size that runs the observability stack. Medium instances carry less compute and memory than large or xlarge sizes within the same family. The t2 and t3 families are general-purpose burstable types, while m5 instances offer balanced compute and memory for steady workloads.
Am I charged when my chosen instance is stopped or paused?
Software charges accrue per hour only while your instance runs. Fully stopped instances do not accrue hourly software fees. Underlying AWS costs such as storage may still apply for a stopped instance, but the observability stack meters running hours only.
What operational services come with the hourly charge?
Each deployment includes provisioning, pre-configured Grafana dashboards, automated daily backups, one-click updates, security patching, and 24/7 monitoring with alerting. Alerts route to channels like email or team chat. You do not manage servers manually; those tasks are handled for you.
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Unified Monitoring Stack: Preconfigured environment with Prometheus, Grafana, and Apache, deployed via Docker Compose for seamless observability and visualization.
Guided First-Boot Script: Interactive setup script for domain mapping, SSL configuration, and initial deployment, including input validation, DNS verification, and failsafe retry logic.
Automated SSL/TLS Provisioning: Integrated with Let's Encrypt and Certbot to automatically issue and configure SSL certificates for secure HTTPS access.
Secure Configuration Management: Centralized .env file securely stores domain, IP address, port configuration, and Grafana admin credentials for easy management and future updates.
Failsafe Initialization: Built-in failsafe mechanism ensures setup completion by automatically retrying interrupted or failed installation steps for both Prometheus and Grafana.
Optimized Container Architecture: Docker Compose-based deployment ensures portability, isolation, and performance optimization for production-ready monitoring.
Apache Virtual Host Automation: Automatically configures Apache virtual hosts and updates domain details for HTTP and HTTPS access for both services.
Custom Domain Support: Simplified domain configuration process with DNS propagation checks before SSL issuance.
Preconfigured Grafana Data Source: Grafana is ready to connect to Prometheus out-of-the-box, minimizing manual configuration.
Production-Ready Monitoring: Tuned Prometheus and Grafana setup is ideal for monitoring infrastructure, Docker, Kubernetes, or standalone environments with minimal overhead.
Secure Access Options: Easily extendable to enable Basic Authentication or other access controls for Grafana and Prometheus dashboards.
Additional details
Usage instructions
Launch an Instance
From AWS Marketplace, click Continue to Subscribe and then Continue to Configuration.
Choose the Recommended Instance Type
Select t2.medium or larger for optimal performance.
Configure Security Group
Allow inbound traffic on ports 22 (SSH), 80 (HTTP), and 443 (HTTPS).
Connect to the Instance
ssh -i <your-key.pem> ubuntu@<public-ip>
First-Boot Setup
On first boot, the failsafe script automatically runs and performs:
Prompts to optionally map a custom domain for Grafana and/or Prometheus.
Validates that the domain's DNS A record points to your instance's public IP.
Configures Apache and prepares the environment for both services.
Configure DNS (if using a domain)
Add an A record in your DNS pointing to the instance's public IP.
The script automatically verifies DNS propagation using multiple global resolvers.
Automatic SSL Setup
Enter your email address when prompted for SSL notifications.
Certbot automatically issues and installs Let's Encrypt SSL certificates once DNS is validated.
Apache is reconfigured to serve both Grafana and Prometheus securely over HTTPS.
Start Monitoring Stack
Both Prometheus and Grafana containers start automatically using Docker Compose.
You can manually check or restart the containers:
cd /opt/app
docker compose ps
docker compose restart
Access Dashboards
Prometheus:
If no domain: http://<public-ip>:9090
If domain with SSL: https://<your-domain>
Grafana:
If no domain: http://<public-ip>:3000
If domain with SSL: https://<your-domain>
Login to Grafana
Use the admin credentials stored in the environment file:
/opt/app/.env
Default username: root
Password: (auto-generated and saved securely in .env)
Environment File
Centralized configuration for both Prometheus and Grafana:
/opt/app/.env
/opt/app/promethesu/.env
Includes: domain, IP addresses, ports, and Grafana admin credentials.
Thank you for subscribing. Your instance is ready to go!
Need Support or Customization?
Whether you're facing setup issues or need custom features, Perimattic's expert team is here to help:
We offer:
Free setup assistance
Custom development & integrations
Infrastructure consulting
Automation & AI solutions
With 13+ years of experience serving global clients, we ensure your deployment runs smoothly and scales with your needs.
What We Help With:
Initial setup and configuration assistance (free)
Troubleshooting connectivity, performance, and backup issues
Custom development and integrations
Infrastructure consulting and architecture review
Migration planning from other solutions
Automation solutions and scaling guidance
Instance Sizing Guidance:
t2.medium or t3.medium: Development environments, small applications
m5.large: Production workloads with moderate traffic
m5.xlarge: High-traffic production deployments and larger datasets
For workload-specific sizing recommendations, contact our team for a free consultation.
Refunds and Issues:
If you experience any issues or need to request a refund, contact us at aws-support@perimattic.com and we will respond promptly.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Production-ready Grafana with Prometheus, full root access, and security hardening - a self-hosted observability stack for teams needing complete control over monitoring and dashboards on AWS.
Perimattic delivers DevOps and Platform Engineering as an embedded partner, using ManageStacks automation, GitOps, and Kubernetes to accelerate AWS software delivery.
Production-ready ClickHouse with full root access, automated backups, and security hardening - a high-performance columnar database for real-time analytics on AWS.
Production-ready Neo4j with full root access, automated backups, and security hardening - a self-hosted graph database for knowledge graphs, recommendation engines, and network analysis on AWS.
Production-ready Neo4j with full root access, automated backups, and security hardening - a self-hosted graph database for knowledge graphs, recommendation engines, and network analysis on AWS.
Production-ready Neo4j with full root access, automated backups, and security hardening - a self-hosted graph database for knowledge graphs, recommendation engines, and network analysis on AWS.
Production-ready ClickHouse with full root access, automated backups, and security hardening - a high-performance columnar database for real-time analytics on AWS.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.