Oracle Database 21c SE2 on Oracle Linux 8

This is a repackaged software product wherein additional charges apply for security hardening, secure-by-default configuration and per-instance setup.

Hardened AMIs for Oracle Database 19c and 21c Standard Edition 2

Deploy Oracle Database on AWS with security-hardened, ready-to-run AMIs built by cloudimg. Every image ships with a secure-by-default configuration, unique per-instance passwords generated on first boot and a listener bound to localhost, so your database is protected from the moment it launches, with no manual lockdown steps required.

Who this product is for

Organisations running Oracle Database Standard Edition 2 workloads on AWS who need a hardened image without the overhead of building and maintaining their own secure baseline. Whether you are migrating an on-premises Oracle database to AWS or launching new workloads, these AMIs give you a locked-down starting point with secure defaults from first boot.

What cloudimg adds to every version

• Built on a fully patched Oracle Linux base with no usable database password shipped in the image
• Oracle Database is installed from Oracle's base release media (19c 19.3.0.0.0, 21c 21.3.0.0.0) with no Release Update or other Oracle patch applied: apply Release Updates with your own Oracle support entitlement.
• On first boot, before any listener starts, setup generates unique per-instance passwords for SYS, SYSTEM and (on 21c) PDBADMIN, verifies the new passwords work and the old ones are refused, and writes them to a root-only file
• If any password generation or verification step fails, the database never starts
• Build residue is removed before image capture

Network and access defaults

• The listener is bound to 127.0.0.1 and the security group opens SSH (port 22) only, so the database is never exposed to the network
• Connect through an SSH tunnel, which encrypts every session between your workstation and the instance
• For direct client connections, the included guide shows how to require Oracle native network encryption (and links Oracle's TLS (TCPS) documentation) first, then open port 1521 to your own networks only

The database has no network exposure at launch: you control exactly when and how external access is enabled.

Included products

• Oracle Database 19c SE2
• Oracle Database 21c SE2

How to choose a version

• Oracle Database 19c SE2: Long Term Release
• Oracle Database 21c SE2: Innovation Release

Getting started on AWS

1. Choose your Oracle Database version (19c or 21c) from the Software version dropdown

2. Select an instance type with up to 8 vCPUs (required by Oracle SE2 licensing)

3. Launch the instance: first boot creates the database and sets unique passwords (allow about 15 minutes)

4. Retrieve your database credentials from the root-only file over SSH

5. Connect to the database through an SSH tunnel for encrypted access

Licensing

This listing includes no Oracle licence. You must hold Oracle Database Standard Edition 2 licences. Oracle licenses Standard Edition 2 on AWS only on instances of up to 8 vCPUs, so this listing offers instance types of up to 8 vCPUs only. Oracle Database 21c is an Innovation Release supported to July 2027.

This listing is a collection of separate AMIs, one per release, chosen from the Software version dropdown at launch.

Support

cloudimg provides 24/7 technical support for every version in this listing by email and live chat, 365 days a year, with a 24-hour response SLA: support@cloudimg.co.uk.

Trademarks

Oracle and Java are registered trademarks of Oracle and/or its affiliates. cloudimg is not affiliated with or endorsed by Oracle.