Apache Fineract Core Banking - Pre-Configured ,

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

## Apache Fineract - Production-Ready Core Banking on AWS

Launch a fully configured Apache Fineract core banking platform on AWS in minutes - no manual installation, no shared credentials, and no complex setup. This AMI eliminates the hours of provisioning normally required to stand up a secure financial-services back end, so your team can focus on products, portfolios, and integrations rather than infrastructure.

Apache Fineract is the open source core banking engine behind the Mifos ecosystem: clients, loans, savings, accounting, and a large REST API for building banking and financial-inclusion applications. This image ships Apache Fineract 1.10.1 as a Spring Boot service backed by MariaDB, with the default tenant schema migrated and ready so you can authenticate and start creating offices, clients, and accounts immediately.

## About cloudimg

cloudimg specializes in pre-configured, production-hardened AMIs for open source platforms on AWS. Our engineering team maintains and supports every image we publish, providing hands-on platform expertise rather than generic hosting assistance.

## Why This AMI Over Alternatives

Apache Fineract ships with a well-known default super-user (mifos / password) and default database credentials. Unlike images that leave those in place, every instance of this image rotates the Fineract administrator password, the application database password, and the TLS material to cryptographically fresh, per-instance values on first boot. No default banking credential and no shared TLS key ever survive into a running customer instance.

## Application Stack

• Apache Fineract 1.10.1 - core banking REST API and Swagger UI (clients, loans, savings, accounting)
• OpenJDK 17 - the runtime for the Fineract Spring Boot provider
• MariaDB - database tier on a dedicated, independently resizable EBS volume, bound to localhost
• nginx - TLS-terminating reverse proxy on port 443 in front of the Fineract provider
• MariaDB Connector/J - the redistributable LGPL JDBC driver (no proprietary drivers bundled)

## Secure First Boot

On first launch, a one-shot systemd service rotates the application database password, generates a unique TLS keystore for the Fineract listener and a unique certificate for the nginx front end, restarts the service, and then rotates the mifos administrator password via the Fineract API. All per-instance secrets are written to a root-only credentials file. No default credential exists in a running instance, closing the security gap present in images that rely on buyers to change shared passwords after deployment.

## Data on a Dedicated Volume

The MariaDB data tier lives on its own EBS volume mounted by filesystem UUID, so the database is captured with the image and can be resized independently of the operating system disk. The database listens only on localhost and is never exposed to the network.

## Compatible AWS Services

• Amazon RDS - migrate the local MariaDB to a managed database for automated backups and Multi-AZ failover
• Amazon CloudFront - global content delivery and DDoS protection in front of the API
• Amazon S3 - store document attachments and exports
• AWS Certificate Manager - front the instance with a load balancer and an ACM certificate for managed HTTPS

## Security and Hardening

The image is HTTPS-native: the Fineract provider serves over TLS on loopback and nginx terminates a per-instance certificate on port 443. The security group should open only SSH (22) and HTTPS (443), restricted to your own address range; the database port is bound to localhost and is not exposed. We recommend enabling EBS encryption for data at rest. These controls support buyers building regulated financial workloads, though buyers remain responsible for their own full compliance assessment.

## Use Cases

• Digital banking and lending back ends - manage clients, loans, savings, and accounting through the REST API
• Financial-inclusion and microfinance platforms - the Mifos/Fineract engine for cooperatives and MFIs
• Fintech application development - a standards-based core banking API to build products on

## 24/7 cloudimg Support

Every subscription includes around-the-clock technical support from cloudimg engineers via email and live chat. Our team assists with deployment, upgrades, performance tuning, tenant configuration, TLS setup, and database administration. Critical issues receive a one-hour average response time. The user guide walks through launch, credential retrieval, authenticating to the API, and creating your first office and client.

All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.