SecureAnyCloud
Deployment guide

Oracle Database Standard Edition 2

Overview

This page is the entry point for the SecureAnyCloud Hardened AMIs for Oracle Database 19c & 21c Standard Edition 2 listing on AWS Marketplace. The listing is a single product that offers several releases as separate software versions. Subscribe once, choose the version you want from the Software version list at launch, and open its guide below for the full setup and connection walk-through.

The AMIs deploy Oracle Database on AWS as security-hardened, ready-to-run images built by SecureAnyCloud. Every image ships with a secure-by-default configuration, unique per-instance passwords generated on first boot and a listener bound to localhost, so your database is protected from the moment it launches, with no manual lockdown steps required.

What you get with every version:

  • A fully patched Oracle Linux base with no usable database password shipped in the image
  • Oracle Database installed from Oracle's base release media (19c 19.3.0.0.0, 21c 21.3.0.0.0), with no Release Update or other Oracle patch applied. Apply Release Updates with your own Oracle support entitlement.
  • Unique per-instance passwords for SYS, SYSTEM and (on 21c) PDBADMIN, which setup generates on first boot before any listener starts. Setup verifies that the new passwords work and the old ones are refused, and writes them to a root-only file.
  • A database that never starts if any password generation or verification step fails
  • Build residue removed before image capture

Pricing is metered hourly per EC2 instance type and is the same for every version in this listing. The recommended instance type is m5.large.

Videos

This short narrated video is a deep dive recorded on the images themselves. It has English captions.

AMIs for Oracle Database 19c & 21c Standard

The video shows Oracle Database 19c SE2 on a running instance: first boot, per-instance passwords, SQL*Plus, the localhost listener and the metadata block.

How to pick a version

  • Open the listing on AWS Marketplace, choose View purchase options, then choose Subscribe. One subscription covers every product and release in the listing, and the free trial starts with it.
  • When the subscription is active, choose Launch your software.
  • Choose One-click launch from AWS Marketplace (or Launch from EC2 Console for full control). In Version, choose the product and release you want. Each version is a separate software version, named <product> <release> on <operating system> - <date>, for example Oracle Database 19c SE2 on Oracle Linux 8 - YYYY-MM-DD. The date is when that version was added to the listing.
  • Choose your Region, an instance type (m5.large is recommended), your EC2 key pair and a security group that opens the ports in the product's guide. Then choose Launch.
  • After launch, open the product's guide below for first login.

You can run several products from the same subscription: launch one instance per product, each from its own software version.

Versions in this listing, newest release first:

  • Oracle Database: 21c on Oracle Linux 8, 19c on Oracle Linux 8

Security model

Every version in this listing follows the same model:

  • No default login. Administrator passwords, database passwords and application secrets are generated on the first boot of each instance and written to a root-only file. No two instances share a secret.
  • Only the documented ports. Each guide lists the ports the product needs. Open only those in your security group.
  • Listener on localhost, SSH only. The database listener is bound to 127.0.0.1, and the listing's default security group opens SSH only. Connect through an SSH tunnel, which encrypts the session. To accept direct client connections, first require Oracle native network encryption or TLS (TCPS) as the guide shows. Then open port 1521 to your own networks only, never to 0.0.0.0/0.
  • Patched base. The operating system is fully patched when the image is built.
  • IMDSv2. Launch with instance metadata version 2 (token required) and a hop limit of 1.

Choose your product

Product Software version OS Guide

Oracle Database Oracle Database 19c SE2 on Oracle Linux 8 Oracle Linux 8 Open guide

Oracle Database Oracle Database 21c SE2 on Oracle Linux 8 Oracle Linux 8 Open guide

How to tell which version you launched

The EC2 console shows the version you chose on the instance's launch record (AMI name and description), and so does your AWS Marketplace subscription. On the instance itself, the login message after SSH names the product and its credentials file. Open the matching guide above for the rest of the walk-through.

Support

SecureAnyCloud provides 24/7 support for every version in this listing through the AWS Marketplace support channel. Raise a ticket through the Marketplace console, or email sales@secureanycloud.com.

All product and company names are trademarks or registered trademarks of their respective holders. Their use here does not imply any affiliation with or endorsement by them.

Deploy on AWS

Launch Hardened AMIs for Oracle Database 19c & 21c Standard Edition 2, with 24/7 support from SecureAnyCloud.

View this image

Need help?

Our support team is available 24/7.

sales@secureanycloud.com

Deploy on AWS