Apache Tomcat (Hardened) on Amazon Linux 2023

Apache Tomcat 10.1 on Amazon Linux 2023 with Amazon Corretto 21, security-hardened for production: minimal package set, SSH key-only access, IMDSv2-only, no manager apps or default users, and continuously patched images. This product has charges associated with it for image hardening, maintenance, and support.

View on AWS Marketplace

Why this image

• Production-ready: systemd-managed Tomcat 10.1 on Amazon Corretto 21; deploy WARs under /opt/tomcat/webapps.
• Security-hardened at build time: minimal packages, key-only SSH, IMDSv2-only, manager/example apps removed, no enabled Tomcat users, version banner suppressed.
• Continuously patched: rebuilt, vulnerability-scanned, and republished on a regular cadence.

About

Apache Tomcat (Hardened) on Amazon Linux 2023 is a production-ready, security-hardened image of the Apache Tomcat servlet container running on Amazon Corretto 21, maintained and supported by Derek Coleman & Associates Inc.

This is repackaged open-source software. Apache Tomcat is developed by the Apache Software Foundation and is distributed under the Apache License 2.0. Apache and Apache Tomcat are trademarks of the Apache Software Foundation; this listing is not endorsed by or affiliated with the ASF. This product bundles unmodified upstream Apache Tomcat on a hardened Amazon Linux 2023 base; the charges associated with this listing are for image hardening, continuous patching, vulnerability scanning, and business-day support - not for the underlying open-source software, which remains free.

Hardening baseline: minimal package footprint, SSH key-only access (password authentication disabled), IMDSv2 enforced, and no default credentials anywhere - the manager, host-manager, docs, and examples webapps are removed, no Tomcat users are enabled, and the server version banner is suppressed. Images are rebuilt, scanned for HIGH and CRITICAL vulnerabilities, and republished on a regular cadence so that new launches start current. Deploy applications under /opt/tomcat/webapps and manage the service with systemd: sudo systemctl restart tomcat.

Pricing (hourly usage, AWS Marketplace)

Recommended: c7i.2xlarge. AWS infrastructure charges are separate and billed by AWS. Charges stop when instances are terminated. No subscription, no minimum.

Getting started

1. Launch from AWS Marketplace (1-Click or EC2 console).
2. Connect via SSH with your EC2 key pair: ssh -i <key> ec2-user@<public-ip>. Root login is disabled; use sudo.
3. Tomcat serves on port 8080; deploy applications by placing WAR files under /opt/tomcat/webapps, then: sudo systemctl restart tomcat. The manager and host-manager apps are removed by design; administer via SSH.
4. Verify: curl -I http://<public-ip>:8080 returns a response, or: sudo systemctl status tomcat.
5. Sensitive data: there are no passwords or secrets anywhere in this product. Logs under /var/log may contain client IPs - treat as personal data.
6. Backup: snapshot the EBS volume (it contains all configuration and data).
7. Resources: a single instance uses 1 EC2 instance and 1 gp3 EBS volume; no other AWS resources are created.
8. Support: support@dcassociatesgroup.com.

Support

Email support@dcassociatesgroup.com — business-day response. Covers image operation, the hardening baseline, and launch issues. See support.

Migrating from Bitnami?

This image is a marketplace-native alternative for teams leaving the retired free Bitnami Tomcat image. It is not a drop-in copy of Bitnami's layout: Bitnami installs under /opt/bitnami and is controlled with ctlscript.sh, while this image uses the standard Amazon Linux 2023 paths and systemctl shown in the getting-started steps above.

• Bitnami Tomcat alternative — migration notes for Apache Tomcat
• Bitnami migration hub — deprecation timeline, Lightsail blueprint dates, and the same image on Azure and Google Cloud

Bitnami is a trademark of Broadcom, Inc. Used for identification only; no affiliation or endorsement implied.