MariaDB 10.5 (Hardened) on Amazon Linux 2023

MariaDB on Amazon Linux 2023, security-hardened for production: minimal package set, SSH key-only access, IMDSv2-only, unix_socket auth (no passwords), remote access closed until you configure it, and continuously patched images. This product has charges associated with it for image hardening, maintenance, and support.

View on AWS Marketplace

Why this image

• Production-ready: systemd-managed MariaDB; data directory initializes on first start; local root via unix_socket.
• Security-hardened at build time: minimal packages, key-only SSH, IMDSv2-only, no default database passwords, port 3306 closed until you open it.
• Continuously patched: rebuilt, vulnerability-scanned, and republished on a regular cadence.

About

MariaDB 10.5 (Hardened) on Amazon Linux 2023 is a production-ready, security-hardened image of the MariaDB relational database, maintained and supported by Derek Coleman & Associates Inc.

This is repackaged open-source software. MariaDB is developed by the MariaDB Foundation and the MariaDB community and is distributed under the GNU General Public License v2. This product bundles unmodified upstream MariaDB on a hardened Amazon Linux 2023 base; the charges associated with this listing are for image hardening, continuous patching, vulnerability scanning, and business-day support - not for the underlying open-source software, which remains free.

Hardening baseline: minimal package footprint, SSH key-only access (password authentication disabled), IMDSv2 enforced, and no default database passwords (local root access uses unix_socket authentication; remote access on port 3306 stays closed until you configure users and open the port to trusted CIDRs). Images are rebuilt, scanned for HIGH and CRITICAL vulnerabilities, and republished on a regular cadence so that new launches start current. The data directory initializes on first start; manage the service with systemd and administer locally with: sudo mariadb.

Pricing (hourly usage, AWS Marketplace)

Recommended: c7i.2xlarge. AWS infrastructure charges are separate and billed by AWS. Charges stop when instances are terminated. No subscription, no minimum.

Getting started

1. Launch from AWS Marketplace (1-Click or EC2 console).
2. Connect via SSH with your EC2 key pair: ssh -i <key> ec2-user@<public-ip>. Root login is disabled; use sudo.
3. Administer locally: sudo mariadb (local root via unix_socket).
4. Remote access (port 3306) and authentication are a deliberate customer configuration step; open 3306 to trusted CIDRs only after configuring users.
5. Verify: sudo mariadb -e 'SELECT VERSION();', or: sudo systemctl status mariadb.
6. Sensitive data: there are no passwords or secrets anywhere in this product.
7. Backup: snapshot the EBS volume (it contains all configuration and data).
8. Resources: a single instance uses 1 EC2 instance and 1 gp3 EBS volume; no other AWS resources are created.
9. Support: support@dcassociatesgroup.com.

Support

Email support@dcassociatesgroup.com — business-day response. Covers image operation, the hardening baseline, and launch issues. See support.

Migrating from Bitnami?

This image is a marketplace-native alternative for teams leaving the retired free Bitnami MariaDB image. It is not a drop-in copy of Bitnami's layout: Bitnami installs under /opt/bitnami and is controlled with ctlscript.sh, while this image uses the standard Amazon Linux 2023 paths and systemctl shown in the getting-started steps above.

• Bitnami MariaDB alternative — migration notes for MariaDB
• Bitnami migration hub — deprecation timeline, Lightsail blueprint dates, and the same image on Azure and Google Cloud

Bitnami is a trademark of Broadcom, Inc. Used for identification only; no affiliation or endorsement implied.