Ubuntu Pro on AWS¶
Ubuntu Pro is a paid offering that provides expanded security coverage, enhanced kernel patching, and hardening options for compliance frameworks.
Pro product availability on AWS¶
Ubuntu Pro images are available for the following products.
Base server products
EKS worker images
For launching server and EKS pro products, refer to Launch an Ubuntu EC2 instance using the AWS CLI
Pro feature overview¶
Expanded Security Maintenance (ESM)¶
ESM extends the security patching of
the main archive to 10 years through the esm-infra
entitlement. In addition
to patching the core of Ubuntu (i.e. the Ubuntu main repository), Pro also offers security maintenance of the
Ubuntu universe repository. This security coverage is considered best effort
without Ubuntu Pro.
Livepatch¶
Livepatch applies security updates to the kernel for critical and high security vulnerabilities in a live system. This allows system administrators to minimise downtime between scheduled maintenance windows. This is particularly helpful for workloads that are expensive to migrate, such as kubernetes workers for EKS.
Compliance¶
Ubuntu Pro offers compliance options for users that need to apply CIS (level 1 and 2) or FIPS hardening. FIPS is currently supported on Ubuntu 18.04 and 20.04. For 22.04, it is currently available through the fips-preview and fips-updates repositories provided through the FIPS pro entitlement, but these modules are not yet approved by NIST.
Ubuntu Landscape¶
All Ubuntu Pro customers are entitled to the usage of Landscape self-hosted and SaaS solutions. Landscape is an endpoint management solution for monitoring your Ubuntu estate. This includes alerting for security vulnerabilities, patching status, managing repository mirrors, and more. To sign up for Landscape SaaS see the sign up page.