PostgreSQL 14 Debian 12 AMI

AWS Marketplace AMI

PostgreSQL 14 Debian 12 AMI

Use a maintained PostgreSQL 14 AWS Marketplace AMI with baseline hardening controls, monthly rebuilds, reviewed SBOM/CVE evidence, and email support for listed AMI questions.

View on AWS Marketplace

At A Glance

What You Get / What You Still Own

Why Choose This AMI

• Faster launch path: Start from a reviewed AMI instead of manually installing PostgreSQL 14, applying OS hardening, and assembling evidence from scratch.
• Maintenance process: Trusted Images rebuilds monthly and may rebuild sooner when warranted by upstream security updates.
• Evidence included: The reviewed AMI includes package inventory, source and root filesystem scan output, runtime hardening status, and CycloneDX SBOM data.
• No hidden customer defaults: The image does not install customer application secrets. You own credentials, certificates, users, routes, backups, and network policy.

Good Fit For

Teams that want a maintained PostgreSQL 14 base image for AWS workloads, with clear launch responsibilities and evidence artifacts available for review.

What’s Included

• PostgreSQL 14 Debian 12 x86_64 AMI with PostgreSQL enabled, bound to localhost by default, and checked for service status checks.
• Hardened AWS AMI baseline with SSH password/root login disabled, kernel/network hardening, source supply-chain scanning, rootfs scanning, and SBOM evidence.
• Monthly patched PostgreSQL AMI rebuild cadence with Trusted Images email support for launch, configuration guidance, patch notifications, and issue triage.
• Trusted Images release metadata and evidence artifact references.
• Email support for listed AMI questions.

Security And Hardening

• IMDSv2 is required by the AMI baseline.
• SSH root login and password authentication are disabled by the common hardening baseline.
• Runtime hardening, package inventory, SBOM generation, and root filesystem CVE scanning are part of the reviewed evidence path.
• No unsupported CIS, STIG, FIPS, HIPAA, SOC 2, PCI, or absence-of-vulnerabilities certification claim is made for this AMI.

Getting Started

1. Launch the AMI from AWS Marketplace in your AWS account using an appropriate x86_64 EC2 instance type.
2. Connect as admin.
3. Review /etc/trusted-images/release and the service configuration before opening network access.
4. Configure users, credentials, TLS, backups, monitoring, and network access.
5. Open only the AWS security group ports your deployment needs. Default service reference: service-specific.
6. Enable EBS encryption, centralized logging, backups, and monitoring according to your environment requirements.

Evidence And Downloads

Download CycloneDX SBOM
Download Trivy root filesystem scan for the reviewed build

Pricing, EULA, And Support

Support covers the AMI as delivered, launch guidance, package questions, security patch notifications, and Marketplace image issues. Custom application development, managed operations, and third-party integrations are outside the standard support scope.

Buyer Responsibilities

You are responsible for customer data, users, credentials, certificates, network exposure, TLS, backups, monitoring, logging, scaling, compliance controls, and application-specific configuration after launch.

Open Source Notice

This AMI is maintained by Trusted Images and includes open source software packages for the target operating system. Trusted Images is not affiliated with, endorsed by, or sponsored by upstream maintainers unless explicitly stated.