SecureAnyCloud
Deployment guide

MySQL MariaDB

Overview

This page is the entry point for the SecureAnyCloud Hardened AMIs for MySQL and MariaDB listing on AWS Marketplace. The listing is a single product that offers several products and releases as separate software versions. Subscribe once, choose the version you want from the Software version list at launch, then open its guide below for the full setup and connection walk-through.

Each AMI launches a MySQL or MariaDB database on AWS with security hardening built in from the start. SecureAnyCloud builds every image on a fully patched base. First-boot setup creates a unique administrator password and a per-instance TLS certificate on each instance, so you begin with a hardened foundation instead of retrofitting security after deployment.

What SecureAnyCloud adds to every version:

  • Every image is built on a fully patched base, with the latest security updates applied at build time.
  • First-boot setup generates the database administrator password and a TLS certificate uniquely on each instance, and writes the password to a root-only file.
  • No default login exists and no two instances share a secret, which removes a common attack vector for database deployments.
  • The database listens on localhost only. The security group opens SSH only, plus ports 80 and 443 on the phpMyAdmin versions, so the network posture is closed by default.

Pricing is metered hourly per EC2 instance type and is the same for every version in this listing. The recommended instance type is m5.large.

How to pick a version

  • Open the listing on AWS Marketplace, choose View purchase options, then choose Subscribe. One subscription covers every product and release in the listing, and the free trial starts with it.
  • When the subscription is active, choose Launch your software.
  • Choose One-click launch from AWS Marketplace, or Launch from EC2 Console for full control. In Version, choose the product and release you want. Each version is a separate software version named <product> <release> on <operating system> - <date>, for example MariaDB 10.11.19 + phpMyAdmin 5.2.3 on Ubuntu 24.04 - YYYY-MM-DD. The date is when that version was added to the listing.
  • Choose your Region and an instance type (m5.large is recommended). Choose your EC2 key pair and a security group that opens the ports in the product's guide, then choose Launch.
  • After launch, open the product's guide below for first login.

You can run several products from the same subscription. Launch one instance per product, each from its own software version.

Versions in this listing, newest release first:

  • MariaDB: 11.8.9 on Ubuntu 24.04, 10.11.19 + phpMyAdmin 5.2.3 on Ubuntu 24.04, 10.11.19 on Ubuntu 24.04
  • MariaDB ColumnStore: 25.10.6 on Ubuntu 24.04
  • MySQL: 9.7.4 on Ubuntu 24.04, 8.4 on Ubuntu 24.04
  • MySQL with phpMyAdmin: 8.4 on Ubuntu 24.04

Security model

Every version in this listing follows the same model:

  • No default login. Administrator passwords, database passwords and application secrets are generated on the first boot of each instance and written to a root-only file. No two instances share a secret.
  • Only the documented ports. Each guide lists the ports the product needs. Open only those in your security group.
  • Database port closed to the internet. Each version's default security group opens SSH, plus HTTP and HTTPS (80/443) only for versions with a web interface. None opens a database port. Reach the database port over an SSH tunnel, or allow it only from the networks of your applications, and never from 0.0.0.0/0.
  • Patched base. The operating system is fully patched when the image is built.
  • HTTPS on first boot. MariaDB 10.11.19 + phpMyAdmin 5.2.3 on Ubuntu 24.04 and MySQL with phpMyAdmin 8.4 on Ubuntu 24.04 serve HTTPS with a per-instance certificate from first boot. The other versions open no web port (80/443). You manage them over SSH, and their guides list the ports they use.

Choose your product

Product Software version OS Guide

MariaDB MariaDB 10.11.19 + phpMyAdmin 5.2.3 on Ubuntu 24.04 Ubuntu 24.04 Open guide

MariaDB MariaDB 10.11.19 on Ubuntu 24.04 Ubuntu 24.04 Open guide

MariaDB MariaDB 11.8.9 on Ubuntu 24.04 Ubuntu 24.04 Open guide

MariaDB ColumnStore MariaDB ColumnStore 25.10.6 on Ubuntu 24.04 Ubuntu 24.04 Open guide

MySQL MySQL 8.4 on Ubuntu 24.04 Ubuntu 24.04 Open guide

MySQL MySQL 9.7.4 on Ubuntu 24.04 Ubuntu 24.04 Open guide

MySQL with phpMyAdmin MySQL with phpMyAdmin 8.4 on Ubuntu 24.04 Ubuntu 24.04 Open guide

How to tell which version you launched

The EC2 console shows the version you chose on the instance's launch record (AMI name and description), and so does your AWS Marketplace subscription. On the instance itself, the login message after SSH names the product and its credentials file.

Open the matching guide above for the rest of the walk-through.

Support

SecureAnyCloud provides 24/7 support for every version in this listing through the AWS Marketplace support channel. Raise a ticket through the Marketplace console, or email sales@secureanycloud.com.

All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.

Deploy on AWS

Launch Hardened AMIs for MySQL & MariaDB with 24/7 support from SecureAnyCloud.

View this image

Need Help?

Our support team is available 24/7.

sales@secureanycloud.com

Deploy on AWS