Ubuntu Pro on AWS

Ubuntu Pro is a paid offering that provides expanded security coverage, enhanced kernel patching, and hardening options for compliance frameworks.

Pro product availability on AWS

Ubuntu Pro images are available for the following products.

For launching server and EKS pro products, refer to Launch an Ubuntu EC2 instance using the AWS CLI

Pro feature overview

Expanded Security Maintenance (ESM)

ESM extends the security patching of the main archive to 10 years through the esm-infra entitlement. In addition to patching the core of Ubuntu (i.e. the Ubuntu main repository), Pro also offers security maintenance of the Ubuntu universe repository. This security coverage is considered best effort without Ubuntu Pro.

Livepatch

Livepatch applies security updates to the kernel for critical and high security vulnerabilities in a live system. This allows system administrators to minimize downtime between scheduled maintenance windows. This is particularly helpful for workloads that are expensive to migrate, such as kubernetes workers for EKS.

Compliance

Ubuntu Pro offers compliance options for users that need to apply CIS (level 1 and 2) or FIPS hardening. FIPS is currently supported on Ubuntu 18.04 and 20.04. For 22.04, it is currently available through the fips-preview and fips-updates repositories provided through the FIPS pro entitlement, but these modules are not yet approved by NIST.

Ubuntu Landscape

All Ubuntu Pro customers are entitled to the usage of Landscape self-hosted and SaaS solutions. Landscape is an endpoint management solution for monitoring your Ubuntu estate. This includes alerting for security vulnerabilities, patching status, managing repository mirrors, and more. To sign up for Landscape SaaS see the sign up page.