AWS image retention policies

Ubuntu images on AWS have three stage of life cycle : release > deprecation > deletion.

Whenever a new image is built and released to AWS, all the previous serials for that image are deprecated except for the last 3. A deprecated image is not visible on the AWS console, but it can still be launched from the AWS CLI using its AMI ID. You can also find and view details of deprecated images using the AWS CLI describe-images command by including the --include-deprecated flag.

Apart from these three stages, some AMIs also become private. AMIs that go unused and have long since been replaced by newer images are marked as private. This is done so that we can reduce the overhead in searching for relevant AMIs in the console or with awscli. Unlike deprecated images, private images are not available for use and are invisible to the describe-images command. From a user’s perspective, they are functionally equivalent to deleted images.

This policy determines when an image will be deleted. Deleted images are no longer accessible for use, but instances already launched with those images will not be affected.

Image retention policy

Our image retention policy depends on the type of Ubuntu image, we publish two types:

  • release images - fully tested, production grade images that benefit from Canonical’s in-life support

  • daily images - untested builds that contain all the latest updates from the Ubuntu archive

For more details about these image types, check out our documentation of image release types, and to get a list of these images on AWS, refer to: Find Ubuntu images on AWS.

The retention policy can be summarised as follows:

Ubuntu suite

Daily Images

Release Images

Interim Release

Active

Delete all but the last 3 serials

Deprecate all except last 3 serials

EOL*

Delete all images

Deprecate all except latest serial

Unlaunched***

Privatize all images

Privatize all except latest serial

LTS Release

Active

Delete all but the last 3 serials

Deprecate all except last 3 serials

EOSS**

Delete all images

Deprecate all except latest serial

Unlaunched***

Privatize all images

Privatize all except latest serial

EKS Release

Active

N/A

Deprecate all except last 3 serials

EOL*

N/A

Delete all except last 3 serials

where:
  • EOL refers to when an interim Ubuntu release (for example, Lunar Lobster 23.04) has reached end-of-life and will no longer enjoy support, or when EKS is no longer supported by AWS.

  • EOSS refers to when an LTS Ubuntu release (for example, Bionic Beaver 18.04 LTS) has reached “End of Standard Support” but will remain supported under Ubuntu Pro

  • Unlaunched refers to AMIs that are older than 6 months and have never been launched by any AWS user