Hardened PostgreSQL 18, PostGIS & Postgres Extension

This is a repackaged open source software product wherein additional charges apply for security hardening, secure-by-default configuration and per-instance setup.

What cloudimg adds to every version

• Every image is built by cloudimg on a fully patched base with the latest security updates applied at build time.
• First-boot setup generates the database superuser and application passwords and a TLS certificate uniquely on each instance and writes them to a root-only file, so no default login exists and no two instances share a secret.

Included products

• AgensGraph 2.17.0: graph and relational queries in one PostgreSQL-based database
• Apache AGE 1.6.0: openCypher graph queries inside PostgreSQL
• Babelfish for PostgreSQL 5.4.0: SQL Server wire protocol and T-SQL on PostgreSQL
• IvorySQL 5.4: Oracle-compatible PostgreSQL
• MobilityDB 1.3.0: moving-object (trajectory) data on PostGIS
• ParadeDB 0.25.9: full-text search and analytics in PostgreSQL
• Percona Server for PostgreSQL 18.6: PostgreSQL with Percona's enterprise extensions
• pg_duckdb 1.1.1: DuckDB analytics inside PostgreSQL
• pg_graphql 1.6.2: a GraphQL API over PostgreSQL
• PGroonga 4.0.8: full-text search in every language
• pgRouting 4.0.2 with PostGIS: routing and network analysis on PostGIS
• PolarDB for PostgreSQL 17.10.1.0: a cloud-native PostgreSQL-compatible database
• PostGIS 3.6.4: spatial database extension (GIS)
• PostgreSQL 17 + pgAdmin 4
• PostgreSQL 18 + pgAdmin 4
• PostgreSQL 18.6 with pgAdmin 9.18
• PostgreSQL 18.6 with pgAudit 18.0

How to choose a version

• Plain PostgreSQL with audit logging: PostgreSQL 18.6 with pgAudit
• PostgreSQL with a web admin console: PostgreSQL 18.6 with pgAdmin
• Maps and spatial queries: PostGIS, or pgRouting for routing, or MobilityDB for moving objects
• Search and analytics inside Postgres: ParadeDB, PGroonga or pg_duckdb
• Graph queries: Apache AGE or AgensGraph; a GraphQL API: pg_graphql
• Moving from SQL Server or Oracle: Babelfish for PostgreSQL or IvorySQL

Network and access defaults

• The security group opens SSH only: reach PostgreSQL on 5432 through an SSH tunnel or from networks you allow, and remote connections require TLS.

This listing is a collection of separate AMIs, one per product and version, chosen from the Software version dropdown at launch.

Support

cloudimg provides 24/7 technical support for every version in this listing by email and live chat, 365 days a year, with a 24-hour response SLA: support@cloudimg.co.uk.

Trademarks

PostgreSQL is a registered trademark of the PostgreSQL Community Association of Canada. Other product names are trademarks of their respective owners. cloudimg is not affiliated with or endorsed by any of them.