Security-hardened open-source server images for AWS

Production-ready AMIs on Amazon Linux 2023: minimal package set, SSH key-only access, IMDSv2-only, no default passwords anywhere, rebuilt and vulnerability-scanned on a regular cadence. Hourly usage pricing on AWS Marketplace — no subscriptions, no lock-in.

The hardening baseline, on every image

• Minimal package footprint; only what the application needs.
• SSH key-only access — password authentication disabled, root login disabled.
• IMDSv2 enforced; services bound to loopback or firewalled until you deliberately expose them.
• No default credentials of any kind; keys are generated per instance where needed.
• Rebuilt, scanned for HIGH and CRITICAL CVEs, and republished on a regular cadence.

Migrating from Bitnami?

In August 2025, Broadcom moved Bitnami's free image catalog to Bitnami Secure Images, and the legacy free catalog was subsequently removed from Docker Hub. If you ran Bitnami images, we publish hardened, actively maintained equivalents:

• Bitnami Apache alternative
• Bitnami HAProxy alternative
• Bitnami Kafka alternative
• Bitnami Keycloak alternative
• Bitnami MariaDB alternative
• Bitnami Memcached alternative
• Bitnami NGINX alternative
• Bitnami PostgreSQL alternative
• Bitnami Tomcat alternative
• Bitnami Valkey alternative

Bitnami is a trademark of Broadcom, Inc. Used for identification only; no affiliation or endorsement implied.