PostgreSQL 16 (Hardened) on Amazon Linux 2023

PostgreSQL 16 on Amazon Linux 2023, security-hardened for production: minimal package set, SSH key-only access, IMDSv2-only, no password auth, data directory initialized on first boot, and continuously patched images. This product has charges associated with it for image hardening, maintenance, and support.

View on AWS Marketplace

Why this image

• Production-ready: systemd-managed PostgreSQL 16; the data directory auto-initializes on first boot under /var/lib/pgsql.
• Security-hardened at build time: minimal packages, key-only SSH, IMDSv2-only, no default database passwords, remote access closed until you configure it.
• Continuously patched: images are rebuilt, vulnerability-scanned, and republished on a regular cadence so new launches start current.

About

PostgreSQL 16 (Hardened) on Amazon Linux 2023 is a production-ready, security-hardened image of the PostgreSQL relational database, maintained and supported by Derek Coleman & Associates Inc.

This is repackaged open-source software. PostgreSQL is developed by the PostgreSQL Global Development Group and distributed under the PostgreSQL License (a permissive OSI-approved license). This product bundles unmodified upstream PostgreSQL 16 on a hardened Amazon Linux 2023 base; the charges associated with this listing are for image hardening, continuous patching, vulnerability scanning, and business-day support - not for the underlying open-source software, which remains free.

Hardening baseline: minimal package footprint, SSH key-only access (password authentication disabled), IMDSv2 enforced, and no default database passwords (local peer/socket auth; remote access on port 5432 stays closed until you configure pg_hba.conf and open it to trusted CIDRs). Images are rebuilt, scanned for HIGH and CRITICAL vulnerabilities, and republished on a regular cadence. The data directory initializes on first boot under /var/lib/pgsql; manage the service with systemd and administer locally with: sudo -u postgres psql.

Pricing (hourly usage, AWS Marketplace)

Recommended: c7i.2xlarge. AWS infrastructure charges are separate and billed by AWS. Charges stop when instances are terminated. No subscription, no minimum.

Getting started

1. Launch from AWS Marketplace (1-Click or EC2 console).
2. Connect via SSH with your EC2 key pair: ssh -i <key> ec2-user@<public-ip>. Root login is disabled; use sudo.
3. The data directory initializes on first boot (under /var/lib/pgsql); administer locally with: sudo -u postgres psql.
4. Remote access (port 5432) and authentication are a deliberate customer configuration step - edit /var/lib/pgsql/data/postgresql.conf (listen_addresses) and /var/lib/pgsql/data/pg_hba.conf (add a scram-sha-256 line for your subnet), restart postgresql, then open 5432 to trusted CIDRs only. Server log: /var/lib/pgsql/data/log/.
5. Verify: sudo -u postgres psql -c 'SELECT 1;'.
6. Sensitive data: there are no passwords or secrets anywhere in this product.
7. Backup: snapshot the EBS volume (it contains all configuration and data).
8. Resources: a single instance uses 1 EC2 instance and 1 gp3 EBS volume; no other AWS resources are created.
9. Support: support@dcassociatesgroup.com.

Support

Email support@dcassociatesgroup.com — business-day response. Covers image operation, the hardening baseline, and launch issues. See support.

Migrating from Bitnami?

This image is a marketplace-native alternative for teams leaving the retired free Bitnami PostgreSQL image. It is not a drop-in copy of Bitnami's layout: Bitnami installs under /opt/bitnami and is controlled with ctlscript.sh, while this image uses the standard Amazon Linux 2023 paths and systemctl shown in the getting-started steps above.

• Bitnami PostgreSQL alternative — migration notes for PostgreSQL
• Bitnami migration hub — deprecation timeline, Lightsail blueprint dates, and the same image on Azure and Google Cloud

Bitnami is a trademark of Broadcom, Inc. Used for identification only; no affiliation or endorsement implied.