MariaDB 11.8.9 on Ubuntu 24.04

This is a repackaged open source software product wherein additional charges apply for security hardening, secure-by-default configuration and per-instance setup.

Hardened AMIs for MySQL and MariaDB: secure by default, ready to deploy

Launch MySQL and MariaDB databases on AWS with security hardening built in from the start. Each AMI from cloudimg is built on a fully patched base, and a unique administrator password and a per-instance TLS certificate are created by first-boot setup on each instance, so you begin with a hardened foundation rather than retrofitting security after deployment.

What cloudimg adds to every version

• Every image is built by cloudimg on a fully patched base with the latest security updates applied at build time.
• First-boot setup generates the database administrator password and a TLS certificate uniquely on each instance and writes the password to a root-only file.
• No default login exists and no two instances share a secret, which removes a common attack vector for database deployments.
• The database listens on localhost only and the security group opens SSH only (plus ports 80 and 443 on the phpMyAdmin versions), so the network posture is closed by default.

Included products

• MariaDB 10.11.19
• MariaDB 10.11.19 + phpMyAdmin 5.2.3
• MariaDB 11.8.9
• MariaDB ColumnStore 25.10.6
• MySQL 8.4
• MySQL 9.7.4
• MySQL with phpMyAdmin 8.4

Use case: web-based database administration with phpMyAdmin

Teams that want a browser-based interface for managing their database, without installing a dedicated DBA tool, can launch one of the phpMyAdmin versions. These AMIs open ports 80 and 443 in addition to SSH and serve phpMyAdmin over HTTPS using the per-instance TLS certificate that first-boot setup creates. Log in with the uniquely generated credentials from the root-only file and start managing your database. This suits small teams and development environments where a lightweight admin UI reduces operational overhead.

Use case: secure remote database access through an SSH tunnel

For workloads where the database should not be exposed to any network, the database-only versions keep the database listening on localhost. Connect to the instance over SSH and open a tunnel to reach the database. If your architecture needs direct TLS connections from specific networks, follow the product guide to open access to only the networks you allow.

Use case: analytical workloads with MariaDB ColumnStore

MariaDB ColumnStore is designed for analytical and data warehousing workloads that benefit from columnar storage. If your queries are large-scale analytics rather than transactions, ColumnStore provides a storage engine optimised for that pattern, with the same hardening and first-boot credential generation as the other versions.

Network and access defaults

• Database-only versions: the database listens on localhost only and the security group opens SSH only. Reach the database through an SSH tunnel, or follow the product guide to accept TLS connections from networks you allow.
• phpMyAdmin versions: ports 80 and 443 are also open, serving phpMyAdmin over HTTPS with the per-instance TLS certificate.

Getting started

1. Select the product and version you want from the Software version dropdown.

2. Choose your EC2 instance type and launch.

3. First-boot setup creates the unique credentials and the TLS certificate automatically.

4. Retrieve the database administrator password from the root-only file on the instance.

5. Connect through an SSH tunnel (all versions) or through phpMyAdmin over HTTPS (phpMyAdmin versions).

This listing is a collection of separate AMIs, one per product and version, chosen from the Software version dropdown at launch.

Support

cloudimg provides 24/7 technical support for every version in this listing by email and live chat, 365 days a year, with a 24-hour response SLA: support@cloudimg.co.uk.

Trademarks

All product names are trademarks of their respective owners. cloudimg is not affiliated with or endorsed by any of them.