Valkey (Hardened) on Amazon Linux 2023

Valkey (Redis-compatible) on Amazon Linux 2023, security-hardened for production: minimal package set, SSH key-only access, IMDSv2-only, bound to loopback with no default auth exposure, and continuously patched images. This product has charges associated with it for image hardening, maintenance, and support.

View on AWS Marketplace

Why this image

• Open-source and license-clean: Valkey is the community Redis-compatible fork; systemd-managed.
• Security-hardened at build time: minimal packages, key-only SSH, IMDSv2-only, bound to loopback until you configure bind + requirepass.
• Continuously patched: rebuilt, vulnerability-scanned, and republished on a regular cadence.

About

Valkey (Hardened) on Amazon Linux 2023 is a production-ready, security-hardened image of the Valkey in-memory data store, maintained and supported by Derek Coleman & Associates Inc.

This is repackaged open-source software. Valkey is a Linux Foundation project - the community-driven, Redis-compatible in-memory key-value store - distributed under the BSD 3-Clause license. This product bundles unmodified upstream Valkey on a hardened Amazon Linux 2023 base; the charges associated with this listing are for image hardening, continuous patching, vulnerability scanning, and business-day support - not for the underlying open-source software, which remains free.

Hardening baseline: minimal package footprint, SSH key-only access (password authentication disabled), IMDSv2 enforced, and no exposed default authentication (Valkey binds to 127.0.0.1 until you deliberately configure bind plus requirepass or TLS in /etc/valkey/valkey.conf and open port 6379 to trusted CIDRs). Images are rebuilt, scanned for HIGH and CRITICAL vulnerabilities, and republished on a regular cadence so that new launches start current. Manage the service with systemd: sudo systemctl restart valkey.

Pricing (hourly usage, AWS Marketplace)

Recommended: c7i.xlarge. AWS infrastructure charges are separate and billed by AWS. Charges stop when instances are terminated. No subscription, no minimum.

Getting started

1. Launch from AWS Marketplace (1-Click or EC2 console).
2. Connect via SSH with your EC2 key pair: ssh -i <key> ec2-user@<public-ip>. Root login is disabled; use sudo.
3. Valkey binds to 127.0.0.1 by default. To expose it, set bind + requirepass (or TLS) in /etc/valkey/valkey.conf, then: sudo systemctl restart valkey, and open port 6379 to trusted CIDRs only.
4. Verify: sudo systemctl status valkey.
5. Sensitive data: there are no passwords or secrets anywhere in this product.
6. Backup: snapshot the EBS volume (it contains all configuration and data).
7. Resources: a single instance uses 1 EC2 instance and 1 gp3 EBS volume; no other AWS resources are created.
8. Support: support@dcassociatesgroup.com.

Support

Email support@dcassociatesgroup.com — business-day response. Covers image operation, the hardening baseline, and launch issues. See support.

Migrating from Bitnami?

This image is a marketplace-native alternative for teams leaving the retired free Bitnami Valkey image. It is not a drop-in copy of Bitnami's layout: Bitnami installs under /opt/bitnami and is controlled with ctlscript.sh, while this image uses the standard Amazon Linux 2023 paths and systemctl shown in the getting-started steps above.

• Bitnami Valkey alternative — migration notes for Valkey
• Bitnami migration hub — deprecation timeline, Lightsail blueprint dates, and the same image on Azure and Google Cloud

Bitnami is a trademark of Broadcom, Inc. Used for identification only; no affiliation or endorsement implied.