SecOps LAMP

Apache, PHP and MariaDB hardened and tuned, for running your own PHP applications.

What it adds

Compared with a default installation of the same software.

Web application firewall on from the first boot.
Encrypted web access from the first boot, with automatic certificates once a domain is set.
Administrator access with your own key pair only.
A host firewall that allows only what the image needs.
Security updates applied automatically.
Repeated failed logins are blocked automatically.
Administrator commands are logged.
Released without leftover keys, credentials or shell history.
Every release passes automated boot and security tests.

Opens the AWS console in your own account, with the image already chosen. Pick a Graviton (arm64) instance type such as t4g.