HAQM Linux AMI

The HAQM Linux AMI includes packages and configurations that provide tight integration with HAQM Web Services. The HAQM Linux AMI comes pre-installed with many AWS API tools and CloudInit. AWS API tools enable scripting of important provisioning tasks from within an HAQM EC2 instance. CloudInit allows passing instance configuration actions to instances at launch time via the EC2 user-data fields, enabling remote configuration of HAQM EC2 instances.

The HAQM Linux AMI is available in all AWS regions. See the supported HAQM Linux AMI image and instance type combinations for more information.

The configuration of the HAQM Linux AMI enhances security by focusing on two main security goals: limiting access and reducing software vulnerabilities. The HAQM Linux AMI limits remote access capabilities by using SSH key pairs and by disabling remote root login. Additionally, the HAQM Linux AMI reduces the number of non-critical packages which are installed on your instance, limiting your exposure to potential security vulnerabilities. Security updates rated "critical" or "important" are automatically applied on the initial boot of the AMI. Upon login, the Message of the Day (\/etc\/motd) indicates whether or not any additional updates are available.

The HAQM Linux AMI includes packages and configurations that provide seamless integration with HAQM Web Services. This allows the HAQM Linux AMI to launch and work with various AWS services out of the box.

The repositories are available in all regions and are accessed via yum. Hosting repositories in each region allows updates to be deployed quickly and without any data transfer charges.

Security updates are provided via the HAQM Linux AMI yum repositories as well as via updated HAQM Linux AMIs. Security alerts are published in the HAQM Linux AMI Security Center. For more information on AWS security policies or to report a security problem, please visit the AWS Security Center.

By default, the HAQM Linux AMI includes a small set of services, utilities, and tools for integration with AWS. The HAQM Linux AMI is designed to provide a functional base, allowing you to add on (via the package repositories) additional utilities and services. Starting with a smaller base of packages means there are fewer components to maintain, as well as less surface area for security exploits.

Support for installation and use of the base HAQM Linux AMI is included through subscriptions to AWS Support. For more information on AWS Support please visit the AWS Support web page.

Older versions of the AMI and updated packages will continue to be available for launch in HAQM EC2 and for installation from the HAQM Linux AMI yum repository even as new HAQM Linux AMI versions are released.

However, we encourage customers to move to, and to use, the latest version of the HAQM Linux AMI in order to ensure the best customer experience that we can provide.