Getting started with Ubuntu Pro on AWS

Thank you for choosing Ubuntu Pro on AWS!

New to Ubuntu Pro? Do you want to make sure you are getting the most out of it?
This guide will help you to understand what is already included and how to activate additional features.

By default, Ubuntu Pro comes with extended security maintenance (ESM) up to 10 years from the release date for main and universe repositories. It also includes kernel livepatch which allows you to avoid urgent reboots due to security vulnerabilities since it applies the patches on a running kernel letting you to wait until your next maintenance window.

For more information and additional resources on the benefits of Ubuntu Pro, please visit ubuntu.com/aws/pro.

To show the current status of Ubuntu Pro features and enablement status:

$ sudo pro status

Key Features

Security Patches for 30,000 + Open Source Applications for 10 years

ESM is pre-enabled on all Ubuntu Pro instances.

To see available updates from Ubuntu Universe and Ubuntu Main archives:

$ pro security-status

Kernel Live-patching

Livepatch is pre-enabled on most Ubuntu Pro instances. To check which CVEs Livepatch is currently protecting you from:

$ canonical-livepatch status --verbose

FIPS 140-2, Common Criteria EAL2, CIS hardening, DISA STIG

If you have a FIPS certification or compliance requirement, we recommend you launch our Ubuntu Pro FIPS premium images if possible.

To enable FIPS, Common Criteria Compliance, CIS hardening, or DISA STIG please visit our documentation.

Click here for a deep dive into the security and compliance features available in Ubuntu Pro for AWS.

Please note that Ubuntu Pro on AWS by default does not include phone and ticketing support. If you need additional technical support services, a 24/7 SLA can easily be added onto your Ubuntu Pro instance through a Private Offer listing. Please contact aws@canonical.com to get in touch with our team.

FAQ

I launched an Ubuntu Pro VM. Do I need to configure it or enable something?

If the machine has outbound internet access, Ubuntu Pro automatically will enable premium features such as Extended Security Maintenance for Main and Universe repositories and livepatch. If you need specific hardening (e.g. CIS or DISA STIG) check the using usg to harden your servers tutorial. If you need FIPS, check enabling FIPS tutorials.

If you need more information about networking requirements for making sure Pro enablement process works (such as egress traffic, endpoints and ports) please check this documentation.

If your machine is running behind a proxy, please check this documentation
How to get the best value from Ubuntu Pro?

There are several ways to get the maximum benefits from Pro, as it comes with several features ready to use. If you are looking for getting all your open source supply always secure and up-to-date, make sure to install packages directly from our official repositories instead of manually adding 3rd party repositories or installing external software. Just using the included apt install command will be enough. If you need hardening and auditing against industry standards, check our usg tool in our tutorials.
If I shut down the machine, does the billing continue?

If you launch Ubuntu Pro from AWS Marketplace or the EC2 console you will only pay as you go, so, if you don’t have any machine running, you won’t pay any additional fee.
Can I create my own golden images from this product?

Yes. You can use EC2 Image Builder, Packer, Terraform or any other automation tool. Follow these tutorials Creating an AMI using Packer or Creating a CIS hardened AMI using EC2 Image Builder to understand how to do it without breaking the subscription validation mechanism.
How can I share my golden image, based on Pro, with other accounts in my organization

It it possible as long as the other account has subscribed to the same product or the license has been shared from the parent AWS account. See this documentation on how to Share AWS Subscriptions within your organization for more information.
Can I use Ubuntu Pro on my automation scripts?

Yes, even as an AWS Marketplace product, you can still reference Ubuntu Pro AMI IDs on any automation tool. You just need to subscribe to the product listing before running the script for the first time, to avoid AWS subscription errors.

For more information about how to get Ubuntu Pro AMIs, you may want to take a look to the following tutorials:
I am migrating from an RPM based distribution (e.g. CentOS, Fedora, RHEL). Is there any information that can help me?

Every migration is a project on its own, but if you are new to Ubuntu, this information can help you to understand the main differences between both distributions.
Can I get volume discounts?

Yes. Volume discounts can be provided through a Private Offer, please contact aws@canonical.com.

Tutorials

Contact us

Are you interested in volume discounts or phone & ticketing support? Or have any other questions?

Please tell us by emailing our team at aws@canonical.com & customersuccess@canonical.com