Trusted Images - Redis on Rocky Linux 9 AMI

This AMI is maintained by Trusted Images and includes open source software packages for the target operating system.

Redis on Rocky Linux 9 provides a maintained AMI for AWS buyers who want a Redis-compatible in-memory data store with repeatable hardening evidence and support from Trusted Images.

What is included:

• Rocky Linux 9 x86_64 AMI with a 30 GB gp3 root volume.
• Redis installed from Rocky Linux package repositories for this AMI.
• Redis service enabled at boot and verified with local service checks.
• TCP listener configured on localhost by default so buyers can intentionally configure authentication, TLS, security groups, and remote application access.
• Protected mode enabled.
• Systemd service hardening with a dedicated unprivileged user, restricted writable paths, private temporary directory, and no Linux capabilities.
• Package inventory, SBOM, root filesystem scan, and runtime hardening evidence captured for supported AMI versions.

Security hardening: The image keeps Redis network exposure conservative by default. Remote application access requires the operator to review /etc/redis/redis.conf, configure ACLs or password authentication, configure TLS or private networking where required, and open only the necessary VPC security group paths. The image does not include prebuilt backups, S3 integration, host firewall policy, monitoring agents, TLS certificates, or additional attached storage. The image makes no claim of complete vulnerability absence, formal benchmark certification, cryptographic module validation, or regulated compliance certification.

Patch and rebuild cadence: Trusted Images rebuilds this image monthly and may rebuild sooner for urgent upstream or operating-system security fixes. Supported AMI versions include source supply-chain scan output, root filesystem scan results, runtime hardening checks, package inventory, and SBOM data.

Launch and configuration basics: Launch the AMI in a private subnet or controlled VPC security group. Confirm the service with systemctl status redis and test local health with redis-cli -h 127.0.0.1 -p 6379 ping. Persistent files use the root volume under /var/lib/redis unless the operator moves data to a separately managed volume.

Support: Trusted Images provides email support for image packaging, rebuild, hardening evidence, and Redis-on-Rocky configuration questions. Support does not include application code development, custom migrations, or continuous operations.

Trusted Images is not affiliated with, endorsed by, or sponsored by LF Projects, the Linux Foundation, Rocky Enterprise Software Foundation, or the Redis project maintainers.