SecureAnyCloud
Deployment guide

database Tools

Overview

This page is the entry point for the SecureAnyCloud Hardened Adminer & Database Admin and Backup Tools AMIs listing on AWS Marketplace. The listing is a single product that offers several database tools and releases as separate software versions.

Subscribe once, choose the version you want from the Software version list at launch, and then open its guide below for the full setup and connection walk-through.

What you get with every version:

  • An image built by SecureAnyCloud on a fully patched base, with the latest security updates applied at build time.
  • Secure defaults. Administrator passwords, database credentials and application secrets are generated uniquely on the first boot of each instance, so no default login exists and no two instances share a secret.

Pricing is metered hourly per EC2 instance type and is the same for every version in this listing. The recommended instance type is m5.large.

How to pick a version

  • Open the listing on AWS Marketplace, choose View purchase options, then Subscribe. One subscription covers every product and release in the listing, and the free trial starts with it.
  • When the subscription is active, choose Launch your software.
  • Choose One-click launch from AWS Marketplace, or Launch from EC2 Console for full control. In Version, choose the product and release you want. Each version is a separate software version, named <product> <release> on <operating system> - <date>, for example Apache ShardingSphere Proxy 5.5.3 on Ubuntu 24.04 - YYYY-MM-DD. The date is when that version was added to the listing.
  • Choose your Region, an instance type (m5.large is recommended), your EC2 key pair and a security group that opens the ports listed in the product's guide. Then choose Launch.
  • After launch, open the product's guide below for first login.

You can run several products from the same subscription. Launch one instance per product, each from its own software version.

The listing contains these versions, newest release first:

  • Apache ShardingSphere Proxy: 5.5.3 on Ubuntu 24.04
  • chproxy for ClickHouse: 1.30.0 on Ubuntu 24.04
  • CloudBeaver CE: 26.2.4 on Ubuntu 24.04
  • Databasus: 3.66.0 on Ubuntu 24.04
  • PG Back Web: 0.5.2 on Ubuntu 24.04
  • pgagroal: 2.1.0 on Ubuntu 24.04
  • pgBackRest: 2.60.0 on Ubuntu 24.04
  • PostgreSQL: 17 on Ubuntu 24.04
  • repmgr: 17 on Ubuntu 24.04
  • WAL-G: 3.0.9 on Ubuntu 24.04

Security model

Every version in this listing follows the same model:

  • No default login. Administrator passwords, database passwords and application secrets are generated on the first boot of each instance and written to a root-only file. No two instances share a secret.
  • Only the documented ports. Each guide lists the ports the product needs. Open only those in your security group.
  • Database port closed to the internet for every version except chproxy for ClickHouse 1.30.0 on Ubuntu 24.04 and pgagroal 2.1.0 on Ubuntu 24.04. Each version's default security group opens only the ports its guide lists. Reach the database port over an SSH tunnel, or allow it only from the networks of your applications, never from 0.0.0.0/0. chproxy for ClickHouse 1.30.0 on Ubuntu 24.04 and pgagroal 2.1.0 on Ubuntu 24.04 accept client connections directly on ports 2345 and 8443 over TLS only, so their default security group opens those ports. Restrict them to the networks of your applications.
  • Patched base. The operating system is fully patched when the image is built.
  • HTTPS on first boot for CloudBeaver CE 26.2.4 on Ubuntu 24.04, Databasus 3.66.0 on Ubuntu 24.04 and PG Back Web 0.5.2 on Ubuntu 24.04. These versions serve HTTPS with a per-instance certificate from first boot. The other versions open no web port (80/443). You manage them over SSH, and their guides list the ports they use.
  • TLS on first boot for chproxy for ClickHouse 1.30.0 on Ubuntu 24.04 and pgagroal 2.1.0 on Ubuntu 24.04. These versions encrypt client connections with their own protocol over TLS (not HTTPS), using a per-instance certificate from first boot. Their guides give the port and explain how to trust the certificate.

Choose your product

Each product below lists the software version to select at launch. All versions run on Ubuntu 24.04.

  • Apache ShardingSphere Proxy: Apache ShardingSphere Proxy 5.5.3 on Ubuntu 24.04
  • chproxy for ClickHouse: chproxy for ClickHouse 1.30.0 on Ubuntu 24.04
  • CloudBeaver CE: CloudBeaver CE 26.2.4 on Ubuntu 24.04
  • Databasus: Databasus 3.66.0 on Ubuntu 24.04
  • PG Back Web: PG Back Web 0.5.2 on Ubuntu 24.04
  • pgagroal: pgagroal 2.1.0 on Ubuntu 24.04
  • pgBackRest: pgBackRest 2.60.0 on Ubuntu 24.04
  • PostgreSQL: PostgreSQL 17 + PgBouncer on Ubuntu 24.04
  • repmgr: repmgr 17 on Ubuntu 24.04
  • WAL-G: WAL-G 3.0.9 on Ubuntu 24.04

How to tell which version you launched

The EC2 console shows the version you chose on the instance's launch record (AMI name and description), and your AWS Marketplace subscription shows it too. On the instance itself, the login message after SSH names the product and its credentials file. Open the matching guide above for the rest of the walk-through.

Support

SecureAnyCloud provides 24/7 support for every version in this listing through the AWS Marketplace support channel. Raise a ticket through the Marketplace console or email sales@secureanycloud.com.

All product and company names are trademarks or registered trademarks of their respective holders. Their use here does not imply any affiliation with or endorsement by them.

Deploy on AWS

Launch Hardened Adminer & Database Admin and Backup Tools AMIs with 24/7 support from SecureAnyCloud.

View this image

Need Help?

Our support team is available 24/7.

sales@secureanycloud.com

Deploy on AWS