SecureAnyCloud
Deployment guide

Streaming Messaging

Overview

This page is the entry point for the SecureAnyCloud Hardened Apache Kafka, RabbitMQ & Message Broker AMIs listing on AWS Marketplace. The listing is a single product that offers several products and releases as separate software versions.

Subscribe once, then choose the version you want from the Software version list at launch. Open that product's guide below for the full setup and connection walk-through.

What SecureAnyCloud adds to every version:

  • Every image is built by SecureAnyCloud on a fully patched base, with the latest security updates applied at build time
  • Services ship secure by default: administrator passwords, database credentials and application secrets are generated uniquely on the first boot of each instance, so no default login exists and no two instances share a secret

Pricing is metered hourly per EC2 instance type and is the same for every version in this listing. The recommended instance type is m5.large.

How to pick a version

  • Open the listing on AWS Marketplace, choose View purchase options, then choose Subscribe. One subscription covers every product and release in the listing, and the free trial starts with it.
  • When the subscription is active, choose Launch your software.
  • Choose One-click launch from AWS Marketplace (or Launch from EC2 Console for full control). In Version, choose the product and release you want. Each version is named <product> <release> on <operating system> - <date>, for example AKHQ for Apache Kafka 0.28.0 on Ubuntu 24.04 - YYYY-MM-DD. The date is when that version was added to the listing.
  • Choose your Region, an instance type (m5.large is recommended) and your EC2 key pair. Select a security group that opens the ports in the product's guide, then choose Launch.
  • After launch, open the product's guide below for first login.

You can run several products from the same subscription. Launch one instance per product, each from its own software version.

Versions in this listing, newest release first:

  • AKHQ for Apache Kafka: 0.28.0 on Ubuntu 24.04
  • Apache Artemis: 2.57.0 on Ubuntu 24.04
  • Apache BifroMQ MQTT Broker: Ubuntu 24.04
  • Apache Iggy: 0.9.0 on Ubuntu 24.04
  • Apache Kafka: 4.4 on Ubuntu 24.04
  • Apache Kafka + Karapace: 4.4 on Ubuntu 24.04
  • Apache Pulsar: 5.0.1 on Ubuntu 24.04
  • Apache Qpid Broker-J: 10.1.1 on Ubuntu 24.04
  • Apache RocketMQ: 5.5.1 on Ubuntu 24.04
  • Apache Storm: 3.1.0 on Ubuntu 24.04
  • Apicurio Registry: 3.3.3 on Ubuntu 24.04
  • Arroyo: 0.15.0 on Ubuntu 24.04
  • BlazingMQ: 0.95.20 on Ubuntu 24.04
  • Centrifugo: 6.10.0 on Ubuntu 24.04
  • Conduit: 0.21.2 on Ubuntu 24.04
  • Debezium: 3.7.1 on Ubuntu 24.04
  • deepstream.io: 10.2.4 on Ubuntu 24.04
  • Eclipse Zenoh: 1.10.2 on Ubuntu 24.04
  • ElasticMQ: 1.7.1 on Ubuntu 24.04
  • Feldera: 0.378.0 on Ubuntu 24.04
  • HiveMQ Community Edition: 2026.5 on Ubuntu 24.04
  • LavinMQ Message Broker: 2.10.4 on Ubuntu 24.04
  • Liftbridge: 26.01.1 on Ubuntu 24.04
  • Mercure: 1.1.6 on Ubuntu 24.04
  • Mochi MQTT Broker: 2.7.9 on Ubuntu 24.04
  • Mosquitto: 2 on Ubuntu 24.04
  • NATS: 2 on Ubuntu 24.04
  • PostgreSQL: 18 on Ubuntu 24.04
  • RabbitMQ: 4.4.0 Message Broker on Ubuntu 24.04
  • RMQTT: 0.24.0 on Ubuntu 24.04
  • rumqttd: 0.20.0 on Ubuntu 24.04
  • Sockudo: 5.2.0 on Ubuntu 24.04
  • webhookd: 1.22.1 on Ubuntu 24.04

Security model

Every version in this listing follows the same model:

  • No default login. Administrator passwords, database passwords and application secrets are generated on the first boot of each instance and written to a root-only file. No two instances share a secret.
  • Only the documented ports. Each guide lists the ports the product needs. Open only those in your security group.
  • Internal services on localhost. Databases and caches listen on 127.0.0.1 only. Never open database ports (3306, 5432, 6379) to the internet.
  • Patched base. The operating system is fully patched when the image is built.
  • HTTPS on first boot for AKHQ for Apache Kafka 0.28.0 on Ubuntu 24.04, Apache Artemis 2.57.0 on Ubuntu 24.04, Apache Iggy 0.9.0 on Ubuntu 24.04, Apache Kafka + Karapace 4.4 on Ubuntu 24.04, Apache Kafka 4.4 on Ubuntu 24.04, Apache Pulsar 5.0.1 on Ubuntu 24.04, Apache Qpid Broker-J 10.1.1 on Ubuntu 24.04, Apache RocketMQ 5.5.1 on Ubuntu 24.04, Apache Storm 3.1.0 on Ubuntu 24.04, Apicurio Registry 3.3.3 on Ubuntu 24.04, Arroyo 0.15.0 on Ubuntu 24.04, Centrifugo 6.10.0 on Ubuntu 24.04, Conduit 0.21.2 on Ubuntu 24.04, Debezium 3.7.1 on Ubuntu 24.04, Feldera 0.378.0 on Ubuntu 24.04, LavinMQ Message Broker 2.10.4 on Ubuntu 24.04, Mercure 1.1.6 on Ubuntu 24.04, RabbitMQ 4.4.0 Message Broker on Ubuntu 24.04, Sockudo 5.2.0 on Ubuntu 24.04, deepstream.io 10.2.4 on Ubuntu 24.04 and webhookd 1.22.1 on Ubuntu 24.04. These versions serve HTTPS with a per-instance certificate from first boot. The other versions open no web port (80/443). You manage them over SSH, and their guide lists the ports they use.
  • TLS on first boot for Apache BifroMQ MQTT Broker on Ubuntu 24.04, ElasticMQ 1.7.1 on Ubuntu 24.04, Liftbridge 26.01.1 on Ubuntu 24.04, Mochi MQTT Broker 2.7.9 on Ubuntu 24.04, Mosquitto 2 MQTT Broker on Ubuntu 24.04, NATS 2 on Ubuntu 24.04, RMQTT 0.24.0 on Ubuntu 24.04 and rumqttd 0.20.0 on Ubuntu 24.04. These versions encrypt client connections with their own protocol over TLS (not HTTPS), using a per-instance certificate from first boot. Their guide gives the port and explains how to trust the certificate.

Choose your product

Product Software version OS Guide

AKHQ for Apache Kafka AKHQ for Apache Kafka 0.28.0 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

Apache Artemis Apache Artemis 2.57.0 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

Apache BifroMQ MQTT Broker Apache BifroMQ MQTT Broker on Ubuntu 24.04 Ubuntu 24.04 Open guide →

Apache Iggy Apache Iggy 0.9.0 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

Apache Kafka Apache Kafka 4.4 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

Apache Kafka + Karapace Apache Kafka + Karapace 4.4 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

Apache Pulsar Apache Pulsar 5.0.1 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

Apache Qpid Broker-J Apache Qpid Broker-J 10.1.1 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

Apache RocketMQ Apache RocketMQ 5.5.1 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

Apache Storm Apache Storm 3.1.0 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

Apicurio Registry Apicurio Registry 3.3.3 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

Arroyo Arroyo 0.15.0 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

BlazingMQ BlazingMQ 0.95.20 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

Centrifugo Centrifugo 6.10.0 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

Conduit Conduit 0.21.2 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

Debezium Debezium 3.7.1 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

deepstream.io deepstream.io 10.2.4 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

Eclipse Zenoh Eclipse Zenoh 1.10.2 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

ElasticMQ ElasticMQ 1.7.1 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

Feldera Feldera 0.378.0 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

HiveMQ Community Edition HiveMQ Community Edition 2026.5 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

LavinMQ Message Broker LavinMQ Message Broker 2.10.4 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

Liftbridge Liftbridge 26.01.1 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

Mercure Mercure 1.1.6 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

Mochi MQTT Broker Mochi MQTT Broker 2.7.9 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

Mosquitto Mosquitto 2 MQTT Broker on Ubuntu 24.04 Ubuntu 24.04 Open guide →

NATS NATS 2 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

PostgreSQL PostgreSQL 18 with PGMQ on Ubuntu 24.04 Ubuntu 24.04 Open guide →

RabbitMQ RabbitMQ 4.4.0 Message Broker on Ubuntu 24.04 Ubuntu 24.04 Open guide →

RMQTT RMQTT 0.24.0 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

rumqttd rumqttd 0.20.0 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

Sockudo Sockudo 5.2.0 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

webhookd webhookd 1.22.1 on Ubuntu 24.04 Ubuntu 24.04 Open guide →

How to tell which version you launched

The EC2 console shows the version on the instance's launch record, in the AMI name and description. Your AWS Marketplace subscription shows it too.

On the instance, the login message after SSH names the product and its credentials file. Open the matching guide above for the rest of the walk-through.

Support

SecureAnyCloud provides 24/7 support for every version in this listing through the AWS Marketplace support channel. Raise a ticket in the Marketplace console or email sales@secureanycloud.com.

All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.

Deploy on AWS

Launch Hardened Apache Kafka, RabbitMQ & Message Broker AMIs with 24/7 support from SecureAnyCloud.

View this image

Need Help?

Our support team is available 24/7.

sales@secureanycloud.com

Deploy on AWS