{ "schemaVersion": 1, "generatedAt": "2026-10-15T06:18:19+00:00", "seller": { "name": "Software Sushi", "profileUrl": "https://aws.amazon.com/marketplace/seller-profile?id=seller-wmeq2wioawqii" }, "docsBaseUrl": "https://docs.softwaresushi.com", "categories": [ { "id": "ai-agents", "name": "AI Agents", "description": "Self-hosted AI agents, agent runtimes and coding assistants on hardened Ubuntu." }, { "id": "ml-data", "name": "AI Platform & Data", "description": "LLM chat, RAG, model gateways, vector search, ML and analytics in your own account." }, { "id": "networking", "name": "Networking & Security", "description": "Gateways, proxies, private access, DNS and secure file transfer." }, { "id": "observability", "name": "Observability", "description": "Monitoring, status pages, logs, telemetry and notifications." }, { "id": "messaging", "name": "Messaging & Data Services", "description": "Caches, brokers and connection poolers." }, { "id": "automation", "name": "Automation & Backup", "description": "Infrastructure as code, configuration management, backup and transfer." } ], "products": [ { "slug": "openclaw", "name": "OpenClaw AI Agent", "title": "OpenClaw AI Agent - Hardened Ubuntu AMI", "category": "ai-agents", "summary": "Self-hosted OpenClaw AI agent on hardened Ubuntu. Connect Telegram, Slack or Discord with your own keys.", "shortDescription": "Pre-installed and security-hardened OpenClaw AI agent AMI. Launch an EC2 instance, add your credentials, and start using your agent. Ready to configure out of the box.", "highlights": [ "Ready in minutes: SSH in, run \"openclaw onboard\", and follow the wizard. OpenClaw, Node.js v22, swap, firewall, and log rotation are all pre-configured. No manual config files needed, the onboard wizard walks you through AI provider, channels, and agent setup.", "Security-hardened from the start: UFW firewall with default-deny policy, fail2ban SSH brute-force protection, key-only SSH authentication, kernel-level network hardening. No additional configuration needed. Hardening is baked into the AMI and active on first boot.", "Works with your stack: connect to OpenAI, Anthropic, AWS Bedrock, Google Vertex AI, OpenRouter, or any compatible provider. Reach users on Telegram, Slack, Discord, WhatsApp, and more. Bring your own keys, no vendor lock-in, no per-message fees from us." ], "awsCategories": [ "AI Security", "AIOps", "Collaboration & Productivity" ], "logoUrl": "https://awsmp-logos.s3.amazonaws.com/3608a31b7e56f8709258ebdc5441c857", "version": { "title": "1.22.0 - Ubuntu 24.04 LTS, Node.js 22, OpenClaw 2026.9.9", "releasedAt": "2026-10-09T00:38:26.158Z", "usage": "Connect via SSH using your EC2 key pair on port 22. Access the OpenClaw agent dashboard on port 18789." }, "regions": 34, "entityId": "prod-pgpzq5rhtjmgw", "productCode": "cffo5olypky8s4x09v8y04aoj", "marketplaceUrl": "https://aws.amazon.com/marketplace/pp/prodview-kujeabcwfij6a", "docsUrl": "https://docs.softwaresushi.com/openclaw/" }, { "slug": "hermes", "name": "Hermes AI Agent", "title": "Hermes AI Agent", "category": "ai-agents", "summary": "Nous Research's Hermes AI agent on hardened Ubuntu, chatting on Telegram with your own model key.", "shortDescription": "Production-ready Hermes AI messaging agent on hardened Ubuntu 24.04. Add your model-provider and Telegram credentials and run it in your AWS account.", "highlights": [ "Ready to configure: Hermes Agent and its Telegram gateway dependencies are pinned and pre-installed; add your own model-provider and Telegram credentials after launch.", "Production-operated foundation: Hermes runs as a systemd service with release markers, persistent customer state, automated security updates, and daily Marketplace-copy health checks.", "Hardened from first boot: UFW, fail2ban, key-only SSH, gp3 storage with encryption available at launch, unattended security upgrades, and required IMDSv2 reduce the host attack surface." ], "awsCategories": [ "AI Security", "AIOps", "Collaboration & Productivity" ], "logoUrl": "https://awsmp-logos.s3.amazonaws.com/28ca4734cb3908e6e09a839495bb5be4", "version": { "title": "v2026.8.18 - Ubuntu 24.04 LTS, Hermes Agent", "releasedAt": "2026-08-20T20:52:35.347Z", "usage": "Documentation: https://docs.softwaresushi.com/hermes/getting-started/\n\n1. Subscribe to Hermes AI Agent, launch the current direct AMI with an EC2 key pair, and restrict inbound TCP 22 to your trusted CIDR. The AMI requires outbound HTTPS to Telegram and your selected model provider. Enable EBS encryption by default in the target AWS Region before launch if the root volume must be encrypted.\n2. Connect with ssh ubuntu@INSTANCE_ADDRESS, run sudo -i, and privately prompt for LLM_API_KEY, BOT_TOKEN, and CUSTOMER_TELEGRAM_ID with read -s so values do not enter shell history. Export those variables plus LLM_PROVIDER and LLM_MODEL, then run bash /opt/hermes/bin/provision-hermes.sh. For the tested Anthropic setup use LLM_PROVIDER=anthropic and LLM_MODEL=claude-sonnet-5; for OpenAI use LLM_PROVIDER=openai and LLM_MODEL=gpt-5.\n3. Verify systemctl status hermes-gateway, /var/log/deploy-ec2.log, and /home/ubuntu/.hermes/logs/gateway.log. Open the Telegram bot, select Start, and send a message. Keep DM_POLICY=allowlist unless public access is intentional.\n4. Customer credentials, configuration, sessions, cron jobs, and state are stored under /home/ubuntu/.hermes; .env is mode 0600. Rotate credentials by reprovisioning with new values, then revoke the old provider key and Telegram token. Back up this directory only through an approved encrypted process. No proprietary data store is used.\n5. For upgrades, launch the newer Marketplace version and migrate only required state after taking a protected backup. Monitor EC2 status checks, hermes-gateway, gateway logs, provider quotas, and Telegram connectivity.\n\nSoftware costs USD 0.02 per running instance-hour after the five-day free software trial for one instance. EC2, EBS, data transfer, Telegram connectivity, and third-party model-provider usage are separate. Stop or terminate unused instances and monitor EC2, EBS, and provider quotas. Browser automation dependencies are not installed. No customer credentials are baked into the image." }, "regions": 1, "entityId": "prod-6ub3yoqzrzbtg", "productCode": "4yep8ibpwqa6oisjqfymbrhry", "marketplaceUrl": "https://aws.amazon.com/marketplace/pp/prodview-n5kpzvscnnau2", "docsUrl": "https://docs.softwaresushi.com/hermes/" }, { "slug": "openshell", "name": "Sushi OpenShell", "title": "Sushi OpenShell: Policy-Controlled Agent Runtime", "category": "ai-agents", "summary": "NVIDIA OpenShell on Graviton: policy-controlled Docker sandboxes behind a private mTLS gateway.", "shortDescription": "Paid production AMI from Software Sushi that packages NVIDIA OpenShell v0.1.2 on Ubuntu 24.04 ARM64 with hardening, first-boot identity, a local mTLS gateway and support contact.", "highlights": [ "Paid production AMI packaging of OpenShell v0.1.2 with hardening, first-boot identity and a local mTLS gateway.", "Policy-controlled Docker sandboxes for command and agent workloads without baked credentials.", "Primary paid hourly software offer; optional seven-day free trial changes billing only, not the installed software." ], "awsCategories": [ "Application Development" ], "logoUrl": "https://awsmp-logos.s3.amazonaws.com/2f80e9b5d269d8a4f32b6dab5a3a5f5d", "version": { "title": "0.3.3-openshell-ubuntu-aws-r6-261006", "releasedAt": "2026-10-07T04:45:00.757Z", "usage": "Launch t4g.medium with at least 32 GiB root storage. Restrict SSH to your administrative CIDR or use an SSM instance role. Connect as ubuntu; run openshell status and bash /opt/sushi/docs/demo.sh. The gateway uses loopback and per-instance mTLS." }, "regions": 1, "entityId": "prod-g3o2srdv2nxz6", "productCode": "2fv9dax4mam7jpmg7dmt08tsm", "marketplaceUrl": "https://aws.amazon.com/marketplace/pp/prodview-yhl7swvrhb7na", "docsUrl": "https://docs.softwaresushi.com/openshell/" }, { "slug": "openhands", "name": "OpenHands Core", "title": "OpenHands Core - Software Sushi", "category": "ai-agents", "summary": "Self-hosted OpenHands Agent Canvas with Python, terminal and Git tools, plus optional private Telegram.", "shortDescription": "OpenHands Core with local Agent Canvas, Python terminal/Git and a private Telegram adapter. Customer cloud-model credentials are required after launch.", "highlights": [ "Pinned CPU runtime with automatic first boot and persistent per-instance customer state.", "Native model-backed tools with an optional dedicated private Telegram workflow.", "The same software functionality before and after the billing-only free trial; customer credentials configured after launch." ], "awsCategories": [ "Application Development" ], "logoUrl": "https://awsmp-logos.s3.amazonaws.com/6ea50dee13a07bd03d7cf1b7c3aa486d", "version": { "title": "0.2.2 - Ubuntu 24.04 LTS, OpenHands Core v1.24.0", "releasedAt": "2026-10-04T21:57:06.661Z", "usage": "Setup and operations guide: https://docs.softwaresushi.com/openhands/getting-started/\n\n1. Subscribe and launch this version in us-east-1 on t3.medium (x86_64), with at least 32 GiB root storage and IMDSv2. Select encrypted customer storage if required. Allow outbound HTTPS for your selected model provider and optional Telegram bot. For SSH, select your EC2 key pair and change TCP 22 ingress from the conservative localhost-only recommendation to your trusted administrator CIDR. Application ports remain private. Alternatively, attach your own minimally privileged Systems Manager instance role and ensure SSM connectivity.\n2. Wait for automatic first boot; confirm sudo systemctl is-active sushi-openhands.service. Use an SSH tunnel: ssh -i YOUR_KEY -L 8000:127.0.0.1:8000 ubuntu@INSTANCE_ADDRESS. Open http://127.0.0.1:8000 on your workstation. SSM port forwarding is an alternative described in the guide. No software installation or seller credentials are needed at instance launch.\n3. Configure your own supported cloud-model provider and model in the native localhost UI. Enter keys privately. For Nanobot, retrieve its per-instance WebUI password through your private SSH connection as described in the guide, without capturing it in logs or screenshots. Core capability exclusions and persistent state paths are documented in the guide. Provider account, key, quota and model charges are separate.\n4. Optionally create your own dedicated Telegram bot using BotFather. Copy the empty template from the guide; fill it privately with your token and exact numeric private chat/user allowlist, then use the installed helper. Keep one polling owner per bot and groups disabled. No provider or bot credentials are baked.\n5. Send a tool task to create a CSV with 5, 17 and 20, assert total 42 and three rows, write result.json and independently read it back. Repeat through your allowed private Telegram chat when configured. A saved key or running service alone is not inference proof.\n6. Monitor service health and provider quotas. Stop unused instances. Software costs USD 0.02 per running instance-hour after the five-day software trial for one instance; EC2, EBS, transfer and model usage are separate. New AMI versions do not automatically upgrade running instances; migrate required protected customer state after backup. Contact info@softwaresushi.com for packaging/setup support." }, "regions": 1, "entityId": "prod-wssqudnw7tnqw", "productCode": "a3xqry915ami3bvlzis5x7k1", "marketplaceUrl": "https://aws.amazon.com/marketplace/pp/prodview-6utwvlurfzzxe", "docsUrl": "https://docs.softwaresushi.com/openhands/" }, { "slug": "nanobot", "name": "Nanobot AI Agent", "title": "Nanobot AI Agent - Software Sushi", "category": "ai-agents", "summary": "Self-hosted nanobot agent with a password-protected web UI, workspace file tools and private Telegram.", "shortDescription": "Nanobot with localhost WebUI, native Python tools and a private Telegram channel. Customer cloud-model credentials are required after launch.", "highlights": [ "Pinned CPU runtime with automatic first boot and persistent per-instance customer state.", "Native model-backed tools with an optional dedicated private Telegram workflow.", "The same software functionality before and after the billing-only free trial; customer credentials configured after launch." ], "awsCategories": [ "Application Development" ], "logoUrl": "https://awsmp-logos.s3.amazonaws.com/28576b50e83ff01004a6ed63ff52bfc0", "version": { "title": "0.2.3 - Ubuntu 24.04 LTS, Nanobot 0.3.5", "releasedAt": "2026-10-04T21:57:00.135Z", "usage": "Setup and operations guide: https://docs.softwaresushi.com/nanobot/getting-started/\n\n1. Subscribe and launch this version in us-east-1 on t3.medium (x86_64), with at least 16 GiB root storage and IMDSv2. Select encrypted customer storage if required. Allow outbound HTTPS for your selected model provider and optional Telegram bot. For SSH, select your EC2 key pair and change TCP 22 ingress from the conservative localhost-only recommendation to your trusted administrator CIDR. Application ports remain private. Alternatively, attach your own minimally privileged Systems Manager instance role and ensure SSM connectivity.\n2. Wait for automatic first boot; confirm sudo systemctl is-active sushi-nanobot.service. Use an SSH tunnel: ssh -i YOUR_KEY -L 8765:127.0.0.1:8765 ubuntu@INSTANCE_ADDRESS. Open http://127.0.0.1:8765 on your workstation. SSM port forwarding is an alternative described in the guide. No software installation or seller credentials are needed at instance launch.\n3. Configure your own supported cloud-model provider and model in the native localhost UI. Enter keys privately. For Nanobot, retrieve its per-instance WebUI password through your private SSH connection as described in the guide, without capturing it in logs or screenshots. Core capability exclusions and persistent state paths are documented in the guide. Provider account, key, quota and model charges are separate.\n4. Optionally create your own dedicated Telegram bot using BotFather. Copy the empty template from the guide; fill it privately with your token and exact numeric private chat/user allowlist, then use the installed helper. Keep one polling owner per bot and groups disabled. No provider or bot credentials are baked.\n5. Send a tool task to create a CSV with 5, 17 and 20, assert total 42 and three rows, write result.json and independently read it back. Repeat through your allowed private Telegram chat when configured. A saved key or running service alone is not inference proof.\n6. Monitor service health and provider quotas. Stop unused instances. Software costs USD 0.02 per running instance-hour after the five-day software trial for one instance; EC2, EBS, transfer and model usage are separate. New AMI versions do not automatically upgrade running instances; migrate required protected customer state after backup. Contact info@softwaresushi.com for packaging/setup support." }, "regions": 1, "entityId": "prod-om4rktuyzdpra", "productCode": "5xpf4lvkyvb7ut2j5ojqmsgpu", "marketplaceUrl": "https://aws.amazon.com/marketplace/pp/prodview-wbynarzm44j44", "docsUrl": "https://docs.softwaresushi.com/nanobot/" }, { "slug": "agent-zero", "name": "Agent Zero Core", "title": "Agent Zero Core - Software Sushi", "category": "ai-agents", "summary": "Focused Agent Zero workbench with file, Bash and Python tools, your own cloud model and private Telegram.", "shortDescription": "Agent Zero Core with a local workbench, cloud-model terminal/files and private Telegram. Customer cloud-model credentials are required after launch.", "highlights": [ "Pinned CPU runtime with automatic first boot and persistent per-instance customer state.", "Native model-backed tools with an optional dedicated private Telegram workflow.", "The same software functionality before and after the billing-only free trial; customer credentials configured after launch." ], "awsCategories": [ "Application Development" ], "logoUrl": "https://awsmp-logos.s3.amazonaws.com/893848b47ac3530a30e921be3dd50745", "version": { "title": "0.1.5 - Ubuntu 24.04 LTS, Agent Zero Core v2.13", "releasedAt": "2026-10-04T21:56:59.660Z", "usage": "Setup and operations guide: https://docs.softwaresushi.com/agent-zero/getting-started/\n\n1. Subscribe and launch this version in us-east-1 on t3.medium (x86_64), with at least 40 GiB root storage and IMDSv2. Select encrypted customer storage if required. Allow outbound HTTPS for your selected model provider and optional Telegram bot. For SSH, select your EC2 key pair and change TCP 22 ingress from the conservative localhost-only recommendation to your trusted administrator CIDR. Application ports remain private. Alternatively, attach your own minimally privileged Systems Manager instance role and ensure SSM connectivity.\n2. Wait for automatic first boot; confirm sudo systemctl is-active agent-zero-core.service. Use an SSH tunnel: ssh -i YOUR_KEY -L 5080:127.0.0.1:5080 ubuntu@INSTANCE_ADDRESS. Open http://127.0.0.1:5080 on your workstation. SSM port forwarding is an alternative described in the guide. No software installation or seller credentials are needed at instance launch.\n3. Configure your own supported cloud-model provider and model in the native localhost UI. Enter keys privately. For Nanobot, retrieve its per-instance WebUI password through your private SSH connection as described in the guide, without capturing it in logs or screenshots. Core capability exclusions and persistent state paths are documented in the guide. Provider account, key, quota and model charges are separate.\n4. Optionally create your own dedicated Telegram bot using BotFather. Copy the empty template from the guide; fill it privately with your token and exact numeric private chat/user allowlist, then use the installed helper. Keep one polling owner per bot and groups disabled. No provider or bot credentials are baked.\n5. Send a tool task to create a CSV with 5, 17 and 20, assert total 42 and three rows, write result.json and independently read it back. Repeat through your allowed private Telegram chat when configured. A saved key or running service alone is not inference proof.\n6. Monitor service health and provider quotas. Stop unused instances. Software costs USD 0.02 per running instance-hour after the five-day software trial for one instance; EC2, EBS, transfer and model usage are separate. New AMI versions do not automatically upgrade running instances; migrate required protected customer state after backup. Contact info@softwaresushi.com for packaging/setup support." }, "regions": 1, "entityId": "prod-ds62rh7srtnjy", "productCode": "admdr4z4yibu8zhsum0tbmtr9", "marketplaceUrl": "https://aws.amazon.com/marketplace/pp/prodview-vnhgmddxyrkhg", "docsUrl": "https://docs.softwaresushi.com/agent-zero/" }, { "slug": "aider", "name": "Aider AI Pair Programmer", "title": "Aider AI Pair Programmer - Software Sushi", "category": "ai-agents", "summary": "Terminal AI pair programmer that edits and commits to your git repo, with the model provider you choose.", "shortDescription": "Aider is an AI pair programmer for your terminal. Describe a change in plain English and Aider edits the right files in your git repository, then commits each change so you can review it or undo it. This Ubuntu 24.04 image is ready on first boot, with a git workspace, Session Manager access and no inbound ports.", "highlights": [ "Ask for a feature, fix or refactor in plain English. Aider edits your git repository and commits every change for easy review or undo.", "Ready on first boot: Aider 0.86.2, a git workspace and a self-check that verifies the install without any model calls.", "Private cloud workstation with no inbound ports or baked keys. Connect through Session Manager and use the model provider you choose." ], "awsCategories": [ "Application Development" ], "logoUrl": "https://awsmp-logos.s3.amazonaws.com/df75ecf5c3df1b53e8ea098205a79778", "version": { "title": "0.1.4 (Aider 0.86.2+sushi.2)", "releasedAt": "2026-10-12T06:03:27.845Z", "usage": "1) Launch t3.medium (4 GiB RAM, 16 GiB or larger encrypted gp3, IMDSv2) with an instance profile that has AmazonSSMManagedInstanceCore and outbound HTTPS. No inbound rules are needed.\n2) Connect: aws ssm start-session --target \n3) Wait for cloud-init, then run: sudo -iu ubuntu bash /opt/sushi/docs/demo.sh (expect SUSHI_CUSTOMER_DEMO_PASSED).\n4) Read /opt/sushi/docs/README.md. The CLI is /usr/local/bin/aider and the workspace is /var/lib/aider/workspace.\n5) Export your provider key in a private shell (or a mode-0600 env file), cd into a git repository and run aider. Never put keys in user-data or logs.\nIf first boot fails, keep the instance as it is for troubleshooting and contact info@softwaresushi.com." }, "regions": 1, "entityId": "prod-3gscn7xn3kurm", "productCode": "6isiv3f4m3r8lpomxjzxailk1", "marketplaceUrl": "https://aws.amazon.com/marketplace/pp/prodview-2trnmidcnkexa", "docsUrl": "https://docs.softwaresushi.com/aider/" }, { "slug": "goose", "name": "Goose CLI Agent", "title": "Goose CLI Agent - Software Sushi", "category": "ai-agents", "summary": "Open-source CLI agent that plans tasks, edits files and runs commands on a private instance.", "shortDescription": "Goose is an open source AI agent for the command line. Give it a task in plain English and it plans the steps, then reads and writes files and runs shell commands until the job is done, using the LLM provider you configure. This Ubuntu 24.04 image gives you a private agent workstation reachable through Session Manager, with no inbound ports.", "highlights": [ "Hand an AI agent a task in plain English. Goose plans the steps, edits files and runs commands with its built-in developer tools.", "Verified in minutes: the built-in check has Goose finish a real file-writing task against a local test model, with no paid model calls.", "Private agent workstation with no inbound ports and no baked credentials. You choose and configure the LLM provider." ], "awsCategories": [ "Application Development" ], "logoUrl": "https://awsmp-logos.s3.amazonaws.com/eeb9e72c8bfc34d22d831b5786f68daa", "version": { "title": "0.1.4 (Goose v1.54.0)", "releasedAt": "2026-10-12T03:36:33.386Z", "usage": "1) Launch t3.medium (2 vCPU, 4 GiB RAM) with a 16 GiB or larger encrypted gp3 root volume and IMDSv2. Attach an instance profile with AmazonSSMManagedInstanceCore, allow outbound HTTPS and keep inbound rules closed.\n2) Connect with aws ssm start-session --target . After cloud-init finishes, run: sudo -iu ubuntu bash /opt/sushi/docs/demo.sh (expect SUSHI_CUSTOMER_DEMO_PASSED).\n3) Read /opt/sushi/docs/README.md, then configure your LLM provider privately as ubuntu (keep keys out of user-data and logs).\n4) Run a task, for example: goose run --text \"\" --with-builtin developer\nBack up your workspace before replacing the instance.\nDocumentation: https://goose-docs.ai/docs/quickstart\nSupport: info@softwaresushi.com" }, "regions": 1, "entityId": "prod-atikolmk7akdy", "productCode": "4gv3cebjp1k01gxkxl4s1hmo5", "marketplaceUrl": "https://aws.amazon.com/marketplace/pp/prodview-mghhkx2xsyani", "docsUrl": "https://docs.softwaresushi.com/goose/" }, { "slug": "open-interpreter", "name": "Open Interpreter", "title": "Open Interpreter - Software Sushi", "category": "ai-agents", "summary": "Let a model write and run code from plain-English requests, with confirmation before every run.", "shortDescription": "Open Interpreter lets a language model write and run code to get real work done from plain-English requests: analyze and chart data, clean up files, convert formats and automate scripts. This Ubuntu 24.04 image runs it on an isolated cloud instance instead of your laptop, asks before running any code and works with the model provider you choose.", "highlights": [ "Describe a task in plain English. The model writes Python or shell code, explains it and runs it on the instance to deliver the result.", "Safe defaults: every code run asks for your confirmation and auto-run is off. No provider key or listening port is included.", "Isolated cloud instance with no listening ports and no baked keys, so your laptop stays out of reach. Use the model provider you choose." ], "awsCategories": [ "Application Development" ], "logoUrl": "https://awsmp-logos.s3.amazonaws.com/d03f5488217314b8eded346c4f14bbd4", "version": { "title": "0.1.6 (Open Interpreter 0.4.2+sushi.2)", "releasedAt": "2026-10-12T06:54:18.531Z", "usage": "1) Launch t3.medium (2 vCPU, 4 GiB RAM) with a 16 GiB or larger encrypted gp3 root volume and IMDSv2. Attach an instance profile with AmazonSSMManagedInstanceCore, allow outbound HTTPS and keep inbound rules closed.\n2) Connect with aws ssm start-session --target . After cloud-init finishes, run: sudo -iu ubuntu bash /opt/sushi/docs/demo.sh (expect SUSHI_CUSTOMER_DEMO_PASSED).\n3) Set your model-provider credentials privately (never in user-data or logs).\n4) Run: interpreter, then describe your task. Review each proposed code block before approving it. The workspace is /var/lib/open-interpreter/workspace.\nSource and license notices are in /usr/share/doc/open-interpreter.\nDocumentation: https://docs.openinterpreter.com/\nSupport: info@softwaresushi.com" }, "regions": 1, "entityId": "prod-oxcssxf4pp3xu", "productCode": "92ij3xtfq35zkkhdjkcx0w1ah", "marketplaceUrl": "https://aws.amazon.com/marketplace/pp/prodview-5bhaamcr7i7uq", "docsUrl": "https://docs.softwaresushi.com/open-interpreter/" }, { "slug": "tabby", "name": "Tabby Coding Assistant", "title": "Tabby Coding Assistant - Software Sushi", "category": "ai-agents", "summary": "Self-hosted AI code completion and chat server on loopback; attach the model you choose after launch.", "shortDescription": "Tabby is an open source, self-hosted AI coding assistant server for code completion and chat, an alternative to hosted copilots. This Ubuntu 24.04 AMI runs the Tabby v0.32.0 CPU server on localhost, with no model weights baked in. Attach the completion model you choose and keep code and prompts in your own AWS account.", "highlights": [ "Self-hosted AI code completion and chat server, so code context stays in your AWS account.", "Starts with no model downloads. Attach the completion model you choose using the included example config.", "The server binds to localhost and you connect through Session Manager. No inbound ports are needed." ], "awsCategories": [ "Application Development" ], "logoUrl": "https://awsmp-logos.s3.amazonaws.com/e250c8aa646c7fda991838741e8821cc", "version": { "title": "0.1.3 (Tabby v0.32.0)", "releasedAt": "2026-10-12T08:18:36.483Z", "usage": "1) Launch t3.medium (16 GiB or larger encrypted gp3, IMDSv2) with AmazonSSMManagedInstanceCore and outbound HTTPS. No inbound rules are needed.\n2) Connect with aws ssm start-session --target . After cloud-init finishes, run: sudo -iu ubuntu bash /opt/sushi/docs/demo.sh (expect SUSHI_CUSTOMER_DEMO_PASSED).\n3) Attach a model: copy guidance from /opt/sushi/etc/tabby/customer-model.example.toml into /var/lib/tabby/config.toml (with sudo), then sudo systemctl restart tabby.service. Local models need more RAM and disk.\n4) From your workstation: aws ssm start-session --target --document-name AWS-StartPortForwardingSession --parameters '{\"portNumber\":[\"8080\"],\"localPortNumber\":[\"8080\"]}' and check http://127.0.0.1:8080/v1/health. Add your own reverse proxy and authentication before exposing it to IDEs over a network.\n5) Back up /var/lib/tabby and /etc/tabby.\nDocumentation: https://tabby.tabbyml.com/docs/welcome/\nSupport: info@softwaresushi.com" }, "regions": 1, "entityId": "prod-nvw4q4ks3cv7g", "productCode": "de9ma0pwzsca03bxyk0ctl8ji", "marketplaceUrl": "https://aws.amazon.com/marketplace/pp/prodview-qoijj34n3ilsm", "docsUrl": "https://docs.softwaresushi.com/tabby/" }, { "slug": "ml-studio", "name": "Sushi ML Studio", "title": "Sushi ML Studio: No-Code Machine Learning with scikit-learn", "category": "ml-data", "summary": "No-code machine learning in your browser: upload a spreadsheet, train scikit-learn models, predict.", "shortDescription": "Sushi ML Studio is no-code machine learning that runs in your browser, on your own EC2 instance. Upload a CSV or Excel file, pick the column you want to predict, and it trains and compares against many scikit-learn models, tells you in plain language how good the best one is, and adds predictions to new spreadsheets. Your data never leaves the instance, and you keep the model file and the Python code that reproduces it.", "highlights": [ "No-code machine learning in minutes: upload a CSV or Excel file, pick the column to predict, and seven scikit-learn models are trained and compared for you, with predictions for new rows ready to download.", "Honest results: every score is measured on rows the model never saw, compared against a simple guess, and explained in plain language, including when a model has not learned anything useful.", "Private and portable: it runs on your own EC2 instance, your data never leaves it, and you download the model file and the Python code that reproduces it. No accounts, no lock-in." ], "awsCategories": [ "ML Solutions", "Structured", "Data Analytics" ], "logoUrl": "https://awsmp-logos.s3.amazonaws.com/1b9fe6aab94272ea00104dd9ee664a96", "version": { "title": "1.1.0", "releasedAt": "2026-10-08T16:36:43.514Z", "usage": "1. Launch the instance with the security group created from seller settings.\n It opens port 8501 for the web UI and port 22 for connecting.\n2. When the instance is running, wait 1 to 5 minutes, then open\n http://:8501 in your browser. It is http, not https.\n3. Sign in with your instance ID, shown on the instance's page in the EC2\n console. It starts with `i-`.\n\nTo choose your own password, use Change password in the Studio's sidebar.\nFrom a terminal on the instance you can also run:\n `sudo sushi-ml-studio set-password`\n\nTo reach the Studio without opening port 8501, tunnel it over SSH:\n `ssh -i .pem -L 8501:localhost:8501 ubuntu@`\nthen open http://localhost:8501.\n\nHelp: info@softwaresushi.com" }, "regions": 34, "entityId": "prod-uicwnoekpcrag", "productCode": "7a8anyoh6szv1bloosjh22iw4", "marketplaceUrl": "https://aws.amazon.com/marketplace/pp/prodview-trpnl7gtc65ia", "docsUrl": "https://docs.softwaresushi.com/ml-studio/" }, { "slug": "duckdb", "name": "DuckDB Analytics", "title": "DuckDB Analytics - Software Sushi", "category": "ml-data", "summary": "DuckDB CLI for fast local CSV and Parquet queries, with pinned extensions for reading your S3 data.", "shortDescription": "This is a repackaged open source software product wherein additional charges apply for AMI packaging, first-boot configuration and setup documentation. Run DuckDB v1.5.6 on Ubuntu 24.04 for local CSV and Parquet queries, with pinned httpfs and aws extensions for optional customer S3 via an instance IAM role.", "highlights": [ "Pinned DuckDB v1.5.6 official linux/amd64 CLI with provenance receipts.", "Local CSV and Parquet queries with pinned httpfs and aws extensions.", "Bundled configuration, backup and day-2 operations documentation." ], "awsCategories": [ "Application Development" ], "logoUrl": "https://awsmp-logos.s3.amazonaws.com/095b701bf4f4058953ed3f46bcf384b5", "version": { "title": "0.1.0 (DuckDB v1.5.6)", "releasedAt": "2026-10-08T12:25:04.068Z", "usage": "Launch t3.medium with at least 16 GiB encrypted gp3 root storage. Use AWS Systems Manager Session Manager as ubuntu, or restrict SSH to your administrative CIDR. After first boot, run bash /opt/sushi/docs/demo.sh. DuckDB has no inbound service port." }, "regions": 1, "entityId": "prod-eybqioxqollgg", "productCode": "ejll8ifv1fj1wht16pm0g91cd", "marketplaceUrl": "https://aws.amazon.com/marketplace/pp/prodview-jywkbamj3dbri", "docsUrl": "https://docs.softwaresushi.com/duckdb/" }, { "slug": "open-webui", "name": "Open WebUI", "title": "Open WebUI - Software Sushi", "category": "ml-data", "summary": "Private ChatGPT-style chat UI for any OpenAI-compatible endpoint, reached through Session Manager.", "shortDescription": "Open WebUI is a self-hosted, ChatGPT-style chat interface for any OpenAI-compatible model endpoint. Give your team one private place to chat with the models you choose. This Ubuntu 24.04 AMI runs Open WebUI v0.11.4 on localhost with a session secret generated per instance, reachable through Session Manager port forwarding.", "highlights": [ "A private, ChatGPT-style chat UI for your team, connected to any OpenAI-compatible endpoint.", "The UI binds to localhost and you reach it through Session Manager. The session secret is generated per instance.", "No baked weights or keys. Chats and settings persist on your EBS volume." ], "awsCategories": [ "Machine Learning" ], "logoUrl": "https://awsmp-logos.s3.amazonaws.com/ffba4db19cb182f9eeaffa6f5191c177", "version": { "title": "0.1.2 (Open WebUI v0.11.4)", "releasedAt": "2026-10-12T06:56:19.223Z", "usage": "1) Launch t3.medium (4 GiB RAM, 24 GiB or larger encrypted gp3, IMDSv2) with AmazonSSMManagedInstanceCore and outbound HTTPS. No inbound rules are needed.\n2) Connect with aws ssm start-session --target . After cloud-init finishes, run: sudo -iu ubuntu bash /opt/sushi/docs/demo.sh (expect SUSHI_CUSTOMER_DEMO_PASSED).\n3) From your workstation: aws ssm start-session --target --document-name AWS-StartPortForwardingSession --parameters '{\"portNumber\":[\"8080\"],\"localPortNumber\":[\"8080\"]}', then open http://127.0.0.1:8080.\n4) Create your account immediately: the first account becomes administrator.\n5) In admin settings, add your OpenAI-compatible base URL and API key. Back up /var/lib/open-webui and /etc/open-webui together.\nDocumentation: https://docs.openwebui.com/\nSupport: info@softwaresushi.com" }, "regions": 1, "entityId": "prod-3asfh7prlv5cy", "productCode": "2li3ene6usgtcmw2hw0xhob4z", "marketplaceUrl": "https://aws.amazon.com/marketplace/pp/prodview-x7uskji6ow7ow", "docsUrl": "https://docs.softwaresushi.com/open-webui/" }, { "slug": "anythingllm", "name": "AnythingLLM RAG Workbench", "title": "AnythingLLM RAG Workbench - Software Sushi", "category": "ml-data", "summary": "Self-hosted AnythingLLM workspace to chat with your documents (RAG) using the models you choose.", "shortDescription": "AnythingLLM is a self-hosted workspace for chatting with your own documents and websites (RAG) using the LLM and embedding providers you choose. This Ubuntu 24.04 AMI stores documents persistently and creates its admin password on first boot. You reach the UI through Session Manager port forwarding.", "highlights": [ "Chat with your own documents and web pages (RAG) using the LLM and embedding providers you choose, including Amazon Bedrock through its OpenAI-compatible endpoint.", "Documents persist on your EBS volume, and each instance creates its own admin password on first boot.", "The UI stays off the internet: it binds to localhost and you reach it through Session Manager port forwarding." ], "awsCategories": [ "Machine Learning" ], "logoUrl": "https://awsmp-logos.s3.amazonaws.com/ed2781f548464976c3b8c92b630da644", "version": { "title": "0.11.5 (AnythingLLM v1.17.0)", "releasedAt": "2026-10-12T09:12:02.884Z", "usage": "1) Launch t3.medium (4 GiB RAM, 40 GiB or larger encrypted gp3, IMDSv2) with AmazonSSMManagedInstanceCore and outbound HTTPS. No inbound rules are needed.\n2) Connect: aws ssm start-session --target . After cloud-init finishes, run: sudo -iu ubuntu bash /opt/sushi/docs/demo.sh (expect SUSHI_CUSTOMER_DEMO_PASSED).\n3) Read the admin password: sudo cat /etc/anythingllm/admin.password\n4) From your workstation: aws ssm start-session --target --document-name AWS-StartPortForwardingSession --parameters '{\"portNumber\":[\"3001\"],\"localPortNumber\":[\"3001\"]}', open http://127.0.0.1:3001 and sign in.\n5) LLM: in Settings > LLM choose Generic OpenAI with any OpenAI-compatible endpoint and key. For Amazon Bedrock use Base URL https://bedrock-runtime.us-east-1.amazonaws.com/openai/v1, a Bedrock API key and a model such as openai.gpt-oss-20b-1:0. The built-in AWS Bedrock option needs keys and does not use the instance role.\n6) New workspaces start in automatic (agent) mode; set Chat mode to Chat in workspace settings for plain document chat.\nDocs: https://docs.anythingllm.com. Back up /var/lib/anythingllm and /etc/anythingllm together." }, "regions": 1, "entityId": "prod-6em7p7rlvqhvk", "productCode": "36ejssbdgjks8jobdvdf29g7o", "marketplaceUrl": "https://aws.amazon.com/marketplace/pp/prodview-usqubwagjg4uw", "docsUrl": "https://docs.softwaresushi.com/anythingllm/" }, { "slug": "flowise", "name": "Flowise", "title": "Flowise - Software Sushi", "category": "ml-data", "summary": "Drag-and-drop Flowise builder for LLM chatbots, RAG pipelines and agents, on loopback-only HTTPS.", "shortDescription": "Flowise is a drag-and-drop builder for LLM chatbots, RAG pipelines and AI agents. Design flows visually, test them and call them over an API. This Ubuntu 24.04 AMI runs Flowise 3.1.4 behind loopback-only HTTPS, creates a per-instance owner account and stores data in SQLite. Bring your own model credentials.", "highlights": [ "Build LLM chatbots, RAG pipelines and agent flows visually, then call them through the Flowise API.", "Loopback-only HTTPS UI with a per-instance certificate and an owner password generated on first boot, reached through Session Manager port forwarding.", "Runs in your AWS account with local SQLite storage. Connect the model providers you already use, including Amazon Bedrock." ], "awsCategories": [ "Application Development" ], "logoUrl": "https://awsmp-logos.s3.amazonaws.com/08e9ea57e9723b6bf31a57b37a9e83f7", "version": { "title": "0.1.15 (Flowise 3.1.4)", "releasedAt": "2026-10-12T20:54:41.840Z", "usage": "1) Launch t3.medium (32 GiB or larger encrypted gp3, IMDSv2) with AmazonSSMManagedInstanceCore and outbound HTTPS. No inbound rules are needed.\n2) Connect with aws ssm start-session --target , then run: sudo -iu ubuntu bash /opt/sushi/docs/demo.sh (it waits for first boot; expect SUSHI_CUSTOMER_DEMO_PASSED).\n3) Read the owner password privately: sudo cat /etc/flowise/admin.password\n4) From your workstation: aws ssm start-session --target --document-name AWS-StartPortForwardingSession --parameters '{\"portNumber\":[\"8443\"],\"localPortNumber\":[\"8443\"]}', open port 8443 on localhost over HTTPS in your browser and trust the instance certificate (/etc/flowise/tls/cert.pem). Sign in as admin@localhost.local.\n5) Add your model-provider credentials in Flowise and build your first flow. Back up /var/lib/flowise and /etc/flowise together." }, "regions": 1, "entityId": "prod-b55c3ccypgcre", "productCode": "61g6lhztehnt9xtwo7fj3fkj6", "marketplaceUrl": "https://aws.amazon.com/marketplace/pp/prodview-yxh2dhd6m7nuo", "docsUrl": "https://docs.softwaresushi.com/flowise/" }, { "slug": "litellm", "name": "LiteLLM Proxy", "title": "LiteLLM Proxy - Software Sushi", "category": "ml-data", "summary": "LiteLLM gateway: one OpenAI-compatible HTTPS endpoint in front of all your LLM providers.", "shortDescription": "LiteLLM Proxy gives all your applications one OpenAI-compatible API in front of the LLM providers you use, so you can switch or combine models and keep provider keys in one place without changing application code. This Ubuntu 24.04 image starts the open source LiteLLM 1.104.2 gateway on first boot, secured with HTTPS and a private master key.", "highlights": [ "One OpenAI-compatible endpoint for all your apps. Switch, combine or fail over between LLM providers without code changes.", "Secure by default: HTTPS on localhost, with a certificate and master key generated for each instance on first boot.", "Working in minutes: a built-in mock route answers an authenticated chat completion before you add any paid provider." ], "awsCategories": [ "Application Development" ], "logoUrl": "https://awsmp-logos.s3.amazonaws.com/d78df1b017e980a083b1f93383e8b638", "version": { "title": "0.1.2 (LiteLLM 1.104.2)", "releasedAt": "2026-10-12T02:19:17.730Z", "usage": "1) Launch t3.medium (4 GiB RAM, 20 GiB or larger encrypted gp3, IMDSv2) with AmazonSSMManagedInstanceCore and outbound HTTPS. No inbound rules are needed.\n2) Connect with aws ssm start-session --target . After cloud-init finishes, run: sudo -iu ubuntu bash /opt/sushi/docs/demo.sh (expect SUSHI_CUSTOMER_DEMO_PASSED).\n3) The master key is at /var/lib/litellm-proxy/master.key (read with sudo) and the certificate at /var/lib/litellm-proxy/tls/cert.pem.\n4) From your workstation: aws ssm start-session --target --document-name AWS-StartPortForwardingSession --parameters '{\"portNumber\":[\"4000\"],\"localPortNumber\":[\"4000\"]}', trust the instance certificate and call https://localhost:4000/v1/chat/completions with Authorization: Bearer .\n5) Add real providers in /etc/litellm-proxy following /opt/sushi/docs/README.md. Back up /etc/litellm-proxy/ and /var/lib/litellm-proxy/ together.\nDocumentation: https://docs.litellm.ai/docs/simple_proxy\nSupport: info@softwaresushi.com" }, "regions": 1, "entityId": "prod-naquy5izxj4lw", "productCode": "bddhetqe9o7q4t75ux0q0phg1", "marketplaceUrl": "https://aws.amazon.com/marketplace/pp/prodview-piscpv4jgvug4", "docsUrl": "https://docs.softwaresushi.com/litellm/" }, { "slug": "qdrant", "name": "Qdrant Vector Database", "title": "Qdrant Vector Database - Software Sushi", "category": "ml-data", "summary": "Private single-node Qdrant vector database for RAG and semantic search, with a per-instance API key.", "shortDescription": "Qdrant is an open source vector database for semantic search and retrieval-augmented generation (RAG). Store embeddings and query by similarity from your AI apps. This Ubuntu 24.04 AMI runs single-node Qdrant 1.19.2 with HTTP and gRPC on the loopback interface, an API key generated per instance and persistent local storage.", "highlights": [ "Vector similarity search with payload filtering: the retrieval layer for RAG and semantic search.", "Secure defaults: HTTP and gRPC bind to the loopback interface, and each instance generates its own API key on first boot.", "Storage and snapshots persist locally, and the guided walkthrough covers your first collection and search." ], "awsCategories": [ "Machine Learning" ], "logoUrl": "https://awsmp-logos.s3.amazonaws.com/65ecc3c1550dbaf402b47f68eb6a98df", "version": { "title": "0.1.4 (Qdrant v1.19.2)", "releasedAt": "2026-10-12T09:58:00.646Z", "usage": "1) Launch t3.medium (4 GiB RAM, 16 GiB or larger encrypted gp3, IMDSv2) with an instance profile that has AmazonSSMManagedInstanceCore and outbound HTTPS. No inbound rules are needed.\n2) Connect: aws ssm start-session --target . After cloud-init finishes, run: sudo -iu ubuntu bash /opt/sushi/docs/demo.sh. It creates a demo collection, upserts and searches vectors, and confirms unauthenticated calls are rejected.\n3) Qdrant listens on 127.0.0.1:6333 (HTTP) and 127.0.0.1:6334 (gRPC) only. Use /opt/sushi/bin/qdrant-api for authenticated calls without printing the key; the API key is in /etc/qdrant/credentials (root only).\n4) To use a client from your workstation: aws ssm start-session --target --document-name AWS-StartPortForwardingSession --parameters '{\"portNumber\":[\"6333\"],\"localPortNumber\":[\"6333\"]}' and send the api-key header.\nDocs: https://qdrant.tech/documentation/. Data and snapshots live under /var/lib/qdrant; back it up together with /etc/qdrant." }, "regions": 1, "entityId": "prod-bbmooy4pynjry", "productCode": "2el9o61bjnzurydzbv8z68dg4", "marketplaceUrl": "https://aws.amazon.com/marketplace/pp/prodview-ih2lqko2lktkk", "docsUrl": "https://docs.softwaresushi.com/qdrant/" }, { "slug": "caddy", "name": "Caddy HTTPS Gateway", "title": "Caddy HTTPS Gateway - Software Sushi", "category": "networking", "summary": "Caddy reverse proxy, private by default, with a per-instance local CA and automatic HTTPS.", "shortDescription": "This is a repackaged open source software product wherein additional charges apply for AMI packaging, first-boot configuration and setup documentation. Run Caddy v2.11.7 as a localhost reverse proxy on Ubuntu 24.04 with an internal CA, fixture origin, and automatic per-instance TLS for loopback HTTPS.", "highlights": [ "Pinned Caddy v2.11.7 with Sigstore-signed release verification.", "Loopback HTTPS reverse proxy with internal CA and basic-auth private API.", "Bundled configuration, backup and day-2 operations documentation." ], "awsCategories": [ "Application Development" ], "logoUrl": "https://awsmp-logos.s3.amazonaws.com/3dfdc1433f2e4e331e11db1cbffa1b65", "version": { "title": "0.1.0 (caddy v2.11.7)", "releasedAt": "2026-10-07T13:25:51.657Z", "usage": "Launch t3.medium with at least 16 GiB encrypted gp3 root storage. Use AWS Systems Manager Session Manager as ubuntu, or restrict SSH to your administrative CIDR. After first boot, run bash /opt/sushi/docs/demo.sh. Open https://127.0.0.1:8443/ through port forwarding with /etc/caddy/local-root.crt." }, "regions": 1, "entityId": "prod-k7wnowoerhb6w", "productCode": "c3mld4exleesem92pwkzig2k8", "marketplaceUrl": "https://aws.amazon.com/marketplace/pp/prodview-z2ff7r3r2pnvq", "docsUrl": "https://docs.softwaresushi.com/caddy/" }, { "slug": "haproxy", "name": "HAProxy Community LTS", "title": "HAProxy Community LTS - Software Sushi", "category": "networking", "summary": "HAProxy LTS HTTP load balancer with a password-protected stats page.", "shortDescription": "This is a repackaged open source software product wherein additional charges apply for AMI packaging, first-boot configuration and setup documentation. Run HAProxy 3.4.6 LTS on Ubuntu 24.04 as a localhost HTTP balancer with synthetic backends and authenticated loopback stats.", "highlights": [ "Pinned HAProxy 3.4.6 LTS built from the official source tarball.", "Localhost HTTP balancer with authenticated loopback stats.", "Bundled configuration, backup and day-2 operations documentation." ], "awsCategories": [ "Application Development" ], "logoUrl": "https://awsmp-logos.s3.amazonaws.com/7242e6c8dc0e6018ed11ecf379d8e58f", "version": { "title": "0.1.0 (HAProxy 3.4.6)", "releasedAt": "2026-10-08T03:25:01.537Z", "usage": "Launch t3.medium with at least 16 GiB encrypted gp3 root storage. Use AWS Systems Manager Session Manager as ubuntu, or restrict SSH to your administrative CIDR. After first boot, run bash /opt/sushi/docs/demo.sh. HAProxy listens on 127.0.0.1:8080 and stats on 127.0.0.1:8404. It has no inbound service port." }, "regions": 1, "entityId": "prod-eirb7efewifvu", "productCode": "1kvuqk72yn7nu1izf64allk4s", "marketplaceUrl": "https://aws.amazon.com/marketplace/pp/prodview-hhcr4qishipy2", "docsUrl": "https://docs.softwaresushi.com/haproxy/" }, { "slug": "wireguard", "name": "WireGuard Private Access", "title": "WireGuard Private Access - Software Sushi", "category": "networking", "summary": "WireGuard endpoint with keys generated on first boot and UDP 51820 closed until you add peers.", "shortDescription": "This is a repackaged open source software product wherein additional charges apply for AMI packaging, first-boot configuration and setup documentation. Run wireguard-tools 1.0.20260223 with the Ubuntu WireGuard kernel module on Ubuntu 24.04, first-boot keys, and UDP 51820 limited to localhost until you add peers.", "highlights": [ "Pinned wireguard-tools 1.0.20260223 with GPL corresponding source and provenance receipts.", "First-boot keys, wg-quick@wg0 overlay defaults, and localhost UDP 51820 allowlist.", "Bundled configuration, backup and day-2 operations documentation." ], "awsCategories": [ "Application Development" ], "logoUrl": "https://awsmp-logos.s3.amazonaws.com/6392bdbd7a9e976556a1b70c8531190a", "version": { "title": "0.1.0 (wireguard-tools 1.0.20260223)", "releasedAt": "2026-10-08T23:57:19.955Z", "usage": "Launch t3.medium with at least 16 GiB encrypted gp3 root storage. Use AWS Systems Manager Session Manager as ubuntu, or restrict SSH to your administrative CIDR. After first boot, run bash /opt/sushi/docs/demo.sh. Copy /usr/local/share/sushi/wireguard/wg0.public to peers; do not expose private keys." }, "regions": 1, "entityId": "prod-l7q7qsf7xmru4", "productCode": "2bwvdasp9gq7yfacur3tw59br", "marketplaceUrl": "https://aws.amazon.com/marketplace/pp/prodview-kxmfd3hzsouxm", "docsUrl": "https://docs.softwaresushi.com/wireguard/" }, { "slug": "unbound", "name": "Unbound DNS Resolver", "title": "Unbound DNS Resolver - Software Sushi", "category": "networking", "summary": "Validating, caching DNS resolver that answers on loopback only until you open it up.", "shortDescription": "This is a repackaged open source software product wherein additional charges apply for AMI packaging, first-boot configuration and setup documentation. Run Unbound 1.26.1 as a loopback validating recursive DNS resolver on Ubuntu 24.04 with a synthetic DNSSEC zone and refused unsigned zone check.", "highlights": [ "Pinned Unbound 1.26.1 built from the official NLnet Labs tarball with provenance receipts.", "Loopback validating resolver with synthetic DNSSEC zone and refused unsigned zone check.", "Bundled configuration, backup and day-2 operations documentation." ], "awsCategories": [ "Application Development" ], "logoUrl": "https://awsmp-logos.s3.amazonaws.com/292d13cef9d7990ef22d17c1950fec18", "version": { "title": "0.1.0 (Unbound 1.26.1)", "releasedAt": "2026-10-08T22:19:01.959Z", "usage": "Launch t3.medium with at least 16 GiB encrypted gp3 root storage. Use AWS Systems Manager Session Manager as ubuntu, or restrict SSH to your administrative CIDR. After first boot, run bash /opt/sushi/docs/demo.sh. Query dig @127.0.0.1 for resolver checks; Unbound stays on loopback by default." }, "regions": 1, "entityId": "prod-5jjbhqrwnkody", "productCode": "9pr5lshcp682zsle5pypvs3w3", "marketplaceUrl": "https://aws.amazon.com/marketplace/pp/prodview-f3l7ur3ffhbaw", "docsUrl": "https://docs.softwaresushi.com/unbound/" }, { "slug": "sftp", "name": "OpenSSH SFTP Drop Box", "title": "OpenSSH SFTP Drop Box - Software Sushi", "category": "networking", "summary": "OpenSSH SFTP drop box: key-only users locked to their own folder, with no shell.", "shortDescription": "This is a repackaged open source software product wherein additional charges apply for AMI packaging, first-boot configuration and setup documentation. Run an OpenSSH SFTP drop box on Ubuntu 24.04 with public-key chroot users, a loopback listener, and no password logins or shells.", "highlights": [ "Signed Ubuntu OpenSSH SFTP with public-key chroot users and no shells.", "Loopback listener on 127.0.0.1:2222; the host SSH service stays unchanged.", "Bundled configuration, backup and day-2 operations documentation." ], "awsCategories": [ "Application Development" ], "logoUrl": "https://awsmp-logos.s3.amazonaws.com/40576237c78e0fe98bf5f0f5098937c6", "version": { "title": "0.1.0 (OpenSSH 9.6p1)", "releasedAt": "2026-10-07T23:39:33.586Z", "usage": "Launch t3.medium with at least 16 GiB encrypted gp3 root storage. Use AWS Systems Manager Session Manager as ubuntu, or restrict SSH to your administrative CIDR. After first boot, run bash /opt/sushi/docs/demo.sh. SFTP listens on 127.0.0.1:2222 only and has no inbound service port." }, "regions": 1, "entityId": "prod-3oatqxc743yrq", "productCode": "c12hofoyxd3xv1rbzqhdkql86", "marketplaceUrl": "https://aws.amazon.com/marketplace/pp/prodview-5n2lcgtl5ldtu", "docsUrl": "https://docs.softwaresushi.com/sftp/" }, { "slug": "uptime-kuma", "name": "Uptime Kuma Monitoring", "title": "Uptime Kuma Monitoring - Software Sushi", "category": "observability", "summary": "Uptime monitoring with HTTP, TCP, DNS and ping checks behind a private HTTPS dashboard.", "shortDescription": "This is a repackaged open source software product wherein additional charges apply for AMI packaging, first-boot configuration and setup documentation. Run Uptime Kuma v2.5.5 as a loopback HTTPS monitoring dashboard on Ubuntu 24.04 with SQLite, HTTP/TCP/DNS/ping checks and automatic per-instance TLS setup.", "highlights": [ "Pinned Uptime Kuma v2.5.5 with npm ci production lock verification.", "Loopback HTTPS dashboard with automatic per-instance TLS and local admin setup.", "Bundled configuration, backup and day-2 operations documentation." ], "awsCategories": [ "Application Development" ], "logoUrl": "https://awsmp-logos.s3.amazonaws.com/35172afe7b3f2c71df978ec2cb538acc", "version": { "title": "0.1.0 (uptime-kuma v2.5.5)", "releasedAt": "2026-10-07T15:39:31.908Z", "usage": "Launch t3.medium with at least 16 GiB encrypted gp3 root storage. Use AWS Systems Manager Session Manager as ubuntu, or restrict SSH to your administrative CIDR. After first boot, run bash /opt/sushi/docs/demo.sh. Open https://127.0.0.1:8443/dashboard through port forwarding." }, "regions": 1, "entityId": "prod-vk2mgnn5mheq6", "productCode": "da3hsz9ikpneq83qct85m9wmv", "marketplaceUrl": "https://aws.amazon.com/marketplace/pp/prodview-nqumtgpunvsfm", "docsUrl": "https://docs.softwaresushi.com/uptime-kuma/" }, { "slug": "gatus", "name": "Gatus Status Page", "title": "Gatus on Ubuntu 24.04 with Per-Instance TLS - Software Sushi", "category": "observability", "summary": "Status page with HTTP, TCP and DNS checks, SQLite history and per-instance TLS.", "shortDescription": "This is a repackaged open source software product wherein additional charges apply for AMI packaging, automatic per-instance TLS configuration and setup documentation. Gatus v5.37.0 on Ubuntu 24.04 provides HTTP, DNS and TCP endpoint checks, a loopback HTTPS status page and SQLite history.", "highlights": [ "Gatus v5.37.0 on Ubuntu 24.04 with HTTP, DNS and TCP endpoint checks and SQLite history.", "Loopback HTTPS on 127.0.0.1:8443 with automatic per-instance TLS and basic authentication for the statuses API.", "Access through AWS Systems Manager Session Manager port forwarding, with bundled configuration, backup and restore documentation." ], "awsCategories": [ "Application Development" ], "logoUrl": "https://awsmp-logos.s3.amazonaws.com/fb4a561baf9ace35b26d6ddae3d9a000", "version": { "title": "0.1.0 (gatus v5.37.0)", "releasedAt": "2026-10-07T11:20:47.520Z", "usage": "Launch t3.medium with at least 16 GiB encrypted gp3 root storage. Use AWS Systems Manager Session Manager as ubuntu, or restrict SSH to your administrative CIDR. After first boot, run bash /opt/sushi/docs/demo.sh. Open https://127.0.0.1:8443/ through port forwarding." }, "regions": 1, "entityId": "prod-zgklmgktx3dmc", "productCode": "dy4njfgmkl8zii9xricfyxddr", "marketplaceUrl": "https://aws.amazon.com/marketplace/pp/prodview-djq6sovdca6wg", "docsUrl": "https://docs.softwaresushi.com/gatus/" }, { "slug": "fluent-bit", "name": "Fluent Bit Log Gateway", "title": "Fluent Bit Log Gateway - Software Sushi", "category": "observability", "summary": "Fluent Bit log gateway with HTTPS ingest, a bounded disk buffer and a local file output.", "shortDescription": "This is a repackaged open source software product wherein additional charges apply for AMI packaging, first-boot configuration and setup documentation. Run Fluent Bit 5.1.3 on Ubuntu 24.04 as a localhost HTTPS log gateway with a bounded disk buffer and local file destination.", "highlights": [ "Pinned Fluent Bit 5.1.3 official Ubuntu amd64 package with provenance receipts.", "First-boot TLS, loopback HTTPS ingest, bounded disk buffer and local file destination.", "Bundled configuration, backup and day-2 operations documentation." ], "awsCategories": [ "Application Development" ], "logoUrl": "https://awsmp-logos.s3.amazonaws.com/9ca704beee2708c9f5f0fca7eb5431ab", "version": { "title": "0.1.0 (Fluent Bit 5.1.3)", "releasedAt": "2026-10-08T06:31:23.994Z", "usage": "Launch t3.medium with at least 16 GiB encrypted gp3 root storage. Use AWS Systems Manager Session Manager as ubuntu, or restrict SSH to your administrative CIDR. After first boot, run bash /opt/sushi/docs/demo.sh. Fluent Bit listens on loopback HTTPS ingest only." }, "regions": 1, "entityId": "prod-n3uh5pwfowbiq", "productCode": "d2bi4jge48mw2yo9na1dzgnbi", "marketplaceUrl": "https://aws.amazon.com/marketplace/pp/prodview-jk3ti2wvq52ce", "docsUrl": "https://docs.softwaresushi.com/fluent-bit/" }, { "slug": "vector", "name": "Vector Log Pipeline", "title": "Vector Log Pipeline - Software Sushi", "category": "observability", "summary": "Vector log pipeline with authenticated HTTPS and file ingest, VRL redaction and a disk buffer.", "shortDescription": "This is a repackaged open source software product wherein additional charges apply for AMI packaging, first-boot configuration and setup documentation. Run Vector 0.58.0 on Ubuntu 24.04 as a loopback log pipeline with JSON ingest, VRL redaction, a bounded disk buffer, and a local file destination.", "highlights": [ "Pinned Vector 0.58.0 official linux/amd64 build with provenance receipts.", "Loopback log pipeline with VRL redaction and a bounded disk buffer.", "Bundled configuration, backup and day-2 operations documentation." ], "awsCategories": [ "Application Development" ], "logoUrl": "https://awsmp-logos.s3.amazonaws.com/ce1b39e26700643982286a6d286505a3", "version": { "title": "0.1.0 (Vector 0.58.0)", "releasedAt": "2026-10-08T18:42:06.155Z", "usage": "Launch t3.medium with at least 16 GiB encrypted gp3 root storage. Use AWS Systems Manager Session Manager as ubuntu, or restrict SSH to your administrative CIDR. After first boot, run bash /opt/sushi/docs/demo.sh. Vector listens on loopback only and has no public inbound service port." }, "regions": 1, "entityId": "prod-5gso6rlr7bsmc", "productCode": "a4ooeq5o3fk3u9raakppf9l90", "marketplaceUrl": "https://aws.amazon.com/marketplace/pp/prodview-zsevx25pnxm5i", "docsUrl": "https://docs.softwaresushi.com/vector/" }, { "slug": "otel-collector", "name": "OpenTelemetry Collector Gateway", "title": "OpenTelemetry Collector Gateway - Software Sushi", "category": "observability", "summary": "OpenTelemetry Collector OTLP gateway for traces, metrics and logs, with TLS and file export.", "shortDescription": "This is a repackaged open source software product wherein additional charges apply for AMI packaging, first-boot configuration and setup documentation. Run otelcol 0.162.0 on Ubuntu 24.04 as a loopback OTLP gateway for traces, metrics, and logs, with first-boot TLS and a rotating local JSON file destination.", "highlights": [ "Pinned otelcol 0.162.0 official linux/amd64 build with provenance receipts.", "Loopback OTLP gateway with first-boot TLS and a local JSON file destination.", "Bundled configuration, backup and day-2 operations documentation." ], "awsCategories": [ "Application Development" ], "logoUrl": "https://awsmp-logos.s3.amazonaws.com/340424a35aea68f7504173e316879274", "version": { "title": "0.1.0 (otelcol 0.162.0)", "releasedAt": "2026-10-08T15:56:34.644Z", "usage": "Launch t3.medium with at least 16 GiB encrypted gp3 root storage. Use AWS Systems Manager Session Manager as ubuntu, or restrict SSH to your administrative CIDR. After first boot, run bash /opt/sushi/docs/demo.sh. otelcol listens on loopback only and has no public inbound service port." }, "regions": 1, "entityId": "prod-elvlzfwe6jobi", "productCode": "1ot89ndcrm6y78xz2tub9bcj4", "marketplaceUrl": "https://aws.amazon.com/marketplace/pp/prodview-zqcftdgr62dje", "docsUrl": "https://docs.softwaresushi.com/otel-collector/" }, { "slug": "gotify", "name": "Gotify Notification Server", "title": "Gotify Notification Server - Software Sushi", "category": "observability", "summary": "Private Gotify notification server with a REST API, web UI, live WebSocket stream and history.", "shortDescription": "This is a repackaged open source software product wherein additional charges apply for AMI packaging, first-boot configuration and setup documentation. Run a private Gotify v3.1.1 Sushi derivative on Ubuntu 24.04 with loopback HTTPS, SQLite history, and a per-instance admin identity.", "highlights": [ "Pinned Gotify 3.1.1-sushi1 derivative with provenance receipts.", "Loopback HTTPS notifications and SQLite history; registration and plugins off.", "Bundled configuration, backup and day-2 operations documentation." ], "awsCategories": [ "Application Development" ], "logoUrl": "https://awsmp-logos.s3.amazonaws.com/c1aba8c9609bd95e04aa99d8c3353444", "version": { "title": "0.1.1 (Gotify 3.1.1-sushi1)", "releasedAt": "2026-10-08T01:37:39.841Z", "usage": "Launch t3.medium with at least 16 GiB encrypted gp3 root storage. Use AWS Systems Manager Session Manager as ubuntu, or restrict SSH to your administrative CIDR. After first boot, run bash /opt/sushi/docs/demo.sh. Gotify serves loopback HTTPS on 127.0.0.1:8443 and has no inbound service port." }, "regions": 1, "entityId": "prod-k6xdvap23xuhy", "productCode": "6espjcisw19ziux471dcaolku", "marketplaceUrl": "https://aws.amazon.com/marketplace/pp/prodview-a45umt5miv4kg", "docsUrl": "https://docs.softwaresushi.com/gotify/" }, { "slug": "langfuse", "name": "Langfuse LLM Observability", "title": "Langfuse LLM Observability - Software Sushi", "category": "observability", "summary": "Self-hosted Langfuse to trace, evaluate and debug LLM apps, with the full single-node stack.", "shortDescription": "Langfuse is an open source LLM observability platform for tracing, evaluating and debugging LLM applications. This Ubuntu 24.04 AMI runs the full single-node stack with per-instance credentials created at first boot, and you reach the UI through AWS Systems Manager port forwarding.", "highlights": [ "Trace, evaluate and debug LLM applications with Langfuse 4.56.0, ingesting through OpenTelemetry or the v4 Langfuse SDKs.", "Trace data stays on your EBS volume, and each instance creates its own credentials and admin password on first boot.", "The UI and data services bind to localhost; you reach the UI through Session Manager port forwarding." ], "awsCategories": [ "Application Development" ], "logoUrl": "https://awsmp-logos.s3.amazonaws.com/1e5d8294d26556dfdccdddd63575dfc0", "version": { "title": "0.2.4 (Langfuse 4.56.0)", "releasedAt": "2026-10-12T22:27:19.319Z", "usage": "1) Launch t3.large (8 GiB RAM, 40 GiB or larger encrypted gp3, IMDSv2) with an instance profile that has AmazonSSMManagedInstanceCore and outbound HTTPS. No inbound rules are needed.\n2) Connect: aws ssm start-session --target . After cloud-init finishes, run: sudo -iu ubuntu bash /opt/sushi/docs/demo.sh (expect SUSHI_CUSTOMER_DEMO_PASSED).\n3) Read the admin password: sudo cat /etc/langfuse/admin.password (user admin@localhost.local).\n4) From your workstation: aws ssm start-session --target --document-name AWS-StartPortForwardingSession --parameters '{\"portNumber\":[\"3000\"],\"localPortNumber\":[\"3000\"]}', then open port 3000 on your workstation in a browser and sign in.\n5) Send traces with OTLP to /api/public/otel/v1/traces or with a v4 Langfuse SDK using the project keys from the UI. Read them back with GET /api/public/v2/observations with fields=core,basic,io to include input and output (the default fields omit them). The legacy v2/v3 ingestion endpoint is not accepted in this v4 mode.\n6) ClickHouse: the bundled ClickHouse is the stable 25.12 release. Its static binary embeds OpenSSL 3.5.0, which has a published CVE; ClickHouse listens only on loopback and is not reachable from the network. Move to a newer AMI when one is released.\nDocs: https://langfuse.com/docs. Back up the Docker volumes and /etc/langfuse together." }, "regions": 1, "entityId": "prod-hfptd3emjkmh6", "productCode": "5w0srb6z0vgoivtqgz96nhufu", "marketplaceUrl": "https://aws.amazon.com/marketplace/pp/prodview-fpbpapg5wymr2", "docsUrl": "https://docs.softwaresushi.com/langfuse/" }, { "slug": "valkey", "name": "Valkey Single-Node Cache", "title": "Valkey Single-Node Cache - Software Sushi", "category": "messaging", "summary": "Valkey single-node cache with loopback TLS, an ACL user, an LRU memory cap and no persistence.", "shortDescription": "This is a repackaged open source software product wherein additional charges apply for AMI packaging, first-boot configuration and setup documentation. Run Valkey 9.1.2 on Ubuntu 24.04 as a private single-node TLS cache with an ACL, 1536 MiB cap, allkeys-lru eviction and no persistence.", "highlights": [ "Pinned Valkey 9.1.2 official tag archive build with TLS and provenance receipts.", "First-boot TLS, ACL, 1536 MiB cap, allkeys-lru and no RDB/AOF persistence.", "Bundled configuration, backup and day-2 operations documentation." ], "awsCategories": [ "Application Development" ], "logoUrl": "https://awsmp-logos.s3.amazonaws.com/aeab38747482fa4e0d49186215abe43a", "version": { "title": "0.1.0 (Valkey 9.1.2)", "releasedAt": "2026-10-08T08:21:25.606Z", "usage": "Launch t3.medium with at least 16 GiB encrypted gp3 root storage and at least 4 GiB RAM. Use AWS Systems Manager Session Manager as ubuntu, or restrict SSH to your administrative CIDR. After first boot, run bash /opt/sushi/docs/demo.sh. Valkey listens on loopback TLS only; persistence is off." }, "regions": 1, "entityId": "prod-mml6muhwfxmki", "productCode": "2bramyhfcejsg3f4wvt8xr3ma", "marketplaceUrl": "https://aws.amazon.com/marketplace/pp/prodview-bige4k6boxrx2", "docsUrl": "https://docs.softwaresushi.com/valkey/" }, { "slug": "pgbouncer", "name": "PgBouncer Connection Pooler", "title": "PgBouncer Connection Pooler - Software Sushi", "category": "messaging", "summary": "PgBouncer PostgreSQL connection pooler with required client TLS and SCRAM authentication.", "shortDescription": "This is a repackaged open source software product wherein additional charges apply for AMI packaging, first-boot configuration and setup documentation. Run PgBouncer 1.26.0 on Ubuntu 24.04 as a localhost PostgreSQL connection pooler with client TLS, SCRAM auth, and first-boot identity.", "highlights": [ "Pinned PgBouncer 1.26.0 source build with OpenSSL and provenance receipts.", "First-boot client TLS, SCRAM userlist and loopback-only pooler defaults.", "Bundled configuration, backup and day-2 operations documentation." ], "awsCategories": [ "Application Development" ], "logoUrl": "https://awsmp-logos.s3.amazonaws.com/38e894d44d222a48fc358560e1c7ea92", "version": { "title": "0.1.0 (PgBouncer 1.26.0)", "releasedAt": "2026-10-08T04:44:58.348Z", "usage": "Launch t3.medium with at least 16 GiB encrypted gp3 root storage. Use AWS Systems Manager Session Manager as ubuntu, or restrict SSH to your administrative CIDR. After first boot, run bash /opt/sushi/docs/demo.sh. PgBouncer listens on loopback port 6432 only." }, "regions": 1, "entityId": "prod-i5hgiqs742fgk", "productCode": "59g3qicsojn6ndw6xutgwls7j", "marketplaceUrl": "https://aws.amazon.com/marketplace/pp/prodview-fbannuyjmcvv6", "docsUrl": "https://docs.softwaresushi.com/pgbouncer/" }, { "slug": "nats", "name": "NATS Core Broker", "title": "NATS Core Broker - Software Sushi", "category": "messaging", "summary": "NATS Core broker with loopback TLS, per-user subject permissions and the nats CLI.", "shortDescription": "This is a repackaged open source software product wherein additional charges apply for AMI packaging, first-boot configuration and setup documentation. Run NATS Server v2.15.0 as a loopback TLS Core NATS broker on Ubuntu 24.04 with nats CLI, username identity, subject permissions, and JetStream off.", "highlights": [ "Pinned NATS Server v2.15.0 and nats CLI v0.5.0 official linux/amd64 binaries with provenance receipts.", "Loopback TLS Core NATS defaults with automatic per-instance TLS, users and subject permissions.", "Bundled configuration, backup and day-2 operations documentation." ], "awsCategories": [ "Application Development" ], "logoUrl": "https://awsmp-logos.s3.amazonaws.com/c03ad8b69d41cd8d9ca0fd36ece8fa8b", "version": { "title": "0.1.0 (nats-server v2.15.0)", "releasedAt": "2026-10-08T20:24:10.606Z", "usage": "Launch t3.medium with at least 16 GiB encrypted gp3 root storage. Use AWS Systems Manager Session Manager as ubuntu, or restrict SSH to your administrative CIDR. After first boot, run bash /opt/sushi/docs/demo.sh. Connect NATS clients to tls://127.0.0.1:4222 through port forwarding." }, "regions": 1, "entityId": "prod-4v7pt6qtnjzqq", "productCode": "1zu73j16g3ktams0rbxcu6qx0", "marketplaceUrl": "https://aws.amazon.com/marketplace/pp/prodview-k5dgjndz7arsk", "docsUrl": "https://docs.softwaresushi.com/nats/" }, { "slug": "mosquitto", "name": "Mosquitto MQTT Broker", "title": "Mosquitto MQTT Broker - Software Sushi", "category": "messaging", "summary": "Eclipse Mosquitto MQTT broker with loopback TLS, users, topic ACLs and persistence.", "shortDescription": "This is a repackaged open source software product wherein additional charges apply for AMI packaging, first-boot configuration and setup documentation. Run Eclipse Mosquitto v2.1.2 as a loopback TLS MQTT broker on Ubuntu 24.04 with CLI clients, username identity, topic ACL, and file persistence.", "highlights": [ "Pinned Mosquitto v2.1.2 built from official source with TLS enabled.", "Loopback mqtts defaults with automatic per-instance TLS, users and ACL.", "Bundled configuration, backup and day-2 operations documentation." ], "awsCategories": [ "Application Development" ], "logoUrl": "https://awsmp-logos.s3.amazonaws.com/ace9b0d53e941c4f63f98f2dc1572754", "version": { "title": "0.1.0 (mosquitto v2.1.2)", "releasedAt": "2026-10-07T17:49:13.281Z", "usage": "Launch t3.medium with at least 16 GiB encrypted gp3 root storage. Use AWS Systems Manager Session Manager as ubuntu, or restrict SSH to your administrative CIDR. After first boot, run bash /opt/sushi/docs/demo.sh. Connect MQTT clients to mqtts://127.0.0.1:8883 through port forwarding." }, "regions": 1, "entityId": "prod-y6f3naqckzklg", "productCode": "8b2wnv8mch1jozz0py83lx7lp", "marketplaceUrl": "https://aws.amazon.com/marketplace/pp/prodview-qrtlqufbpvagg", "docsUrl": "https://docs.softwaresushi.com/mosquitto/" }, { "slug": "opentofu", "name": "OpenTofu Runner", "title": "OpenTofu Runner - Software Sushi", "category": "automation", "summary": "OpenTofu with a pinned offline AWS provider mirror for validate and plan. Nothing auto-applies.", "shortDescription": "This is a repackaged open source software product wherein additional charges apply for AMI packaging, first-boot configuration and setup documentation. Run OpenTofu 1.13.1 on Ubuntu 24.04 for user-started validate and plan against a localhost workspace, with a pinned provider mirror for Amazon Web Services and no automatic apply.", "highlights": [ "Pinned OpenTofu 1.13.1 and terraform-provider-aws with provenance receipts.", "User-started validate and plan on a localhost workspace. No automatic apply.", "Bundled configuration, backup and day-2 operations documentation." ], "awsCategories": [ "Application Development" ], "logoUrl": "https://awsmp-logos.s3.amazonaws.com/3fe89756a30247160ee692baec892276", "version": { "title": "0.1.0 (OpenTofu 1.13.1)", "releasedAt": "2026-10-08T14:10:33.428Z", "usage": "Launch t3.medium with at least 16 GiB encrypted gp3 root storage. Use AWS Systems Manager Session Manager as ubuntu, or restrict SSH to your administrative CIDR. After first boot, run bash /opt/sushi/docs/demo.sh. OpenTofu has no inbound service port and does not apply changes automatically." }, "regions": 1, "entityId": "prod-kb2bvjgxzijgo", "productCode": "65yeh85ykiusj666rs3kr6isk", "marketplaceUrl": "https://aws.amazon.com/marketplace/pp/prodview-jdyy45ljax3ks", "docsUrl": "https://docs.softwaresushi.com/opentofu/" }, { "slug": "ansible", "name": "Ansible Core Runner", "title": "Ansible Core Runner - Software Sushi", "category": "automation", "summary": "ansible-core runner with pinned collections, a localhost inventory and a vault password.", "shortDescription": "This is a repackaged open source software product wherein additional charges apply for AMI packaging, first-boot configuration and setup documentation. Run ansible-core 2.21.4 on Ubuntu 24.04 in a Python 3.12 venv with two pinned Galaxy collections for user-started localhost playbooks.", "highlights": [ "Pinned ansible-core 2.21.4 PyPI wheel with provenance receipts.", "Pinned ansible.posix and ansible.utils collections; localhost inventory by default.", "Bundled configuration, backup and day-2 operations documentation." ], "awsCategories": [ "Application Development" ], "logoUrl": "https://awsmp-logos.s3.amazonaws.com/204f6228a3efb587adc75771c0b03bbc", "version": { "title": "0.1.0 (ansible-core 2.21.4)", "releasedAt": "2026-10-08T10:24:22.985Z", "usage": "Launch t3.medium with at least 16 GiB encrypted gp3 root storage. Use AWS Systems Manager Session Manager as ubuntu, or restrict SSH to your administrative CIDR. After first boot, run bash /opt/sushi/docs/demo.sh. ansible-core has no inbound service port." }, "regions": 1, "entityId": "prod-coyzhqh3mc3um", "productCode": "c16g7hrjq9mo9g4xbh5fz5miy", "marketplaceUrl": "https://aws.amazon.com/marketplace/pp/prodview-ohvowibe47z4q", "docsUrl": "https://docs.softwaresushi.com/ansible/" }, { "slug": "restic", "name": "Restic Backup Worker", "title": "Restic Backup Worker - Software Sushi", "category": "automation", "summary": "restic backup worker: daily encrypted backups, a safe restore script and an optional S3 repository.", "shortDescription": "This is a repackaged open source software product wherein additional charges apply for AMI packaging, first-boot configuration and setup documentation. Run restic v0.19.1 on Ubuntu 24.04 with a daily backup timer, local encrypted repository, check and restore scripts, and optional customer S3 via IAM.", "highlights": [ "Pinned restic v0.19.1 official linux/amd64 binary with provenance receipts.", "Daily backup timer with local encrypted repository and safe restore script.", "Bundled configuration, backup and day-2 operations documentation." ], "awsCategories": [ "Application Development" ], "logoUrl": "https://awsmp-logos.s3.amazonaws.com/b9050c9bbf36d95cebfcf6c806f57a34", "version": { "title": "0.1.0 (restic v0.19.1)", "releasedAt": "2026-10-07T19:55:24.043Z", "usage": "Launch t3.medium with at least 16 GiB encrypted gp3 root storage. Use AWS Systems Manager Session Manager as ubuntu, or restrict SSH to your administrative CIDR. After first boot, run bash /opt/sushi/docs/demo.sh. restic has no inbound service port." }, "regions": 1, "entityId": "prod-yrn3o5izd4lfo", "productCode": "19kwntgnphehvtyp8jlc7vsx1", "marketplaceUrl": "https://aws.amazon.com/marketplace/pp/prodview-l2s2fpf55kctw", "docsUrl": "https://docs.softwaresushi.com/restic/" }, { "slug": "rclone", "name": "Rclone Transfer Worker", "title": "Rclone Transfer Worker - Software Sushi", "category": "automation", "summary": "rclone transfer worker: a daily checksum copy that never deletes, with an optional S3 target.", "shortDescription": "This is a repackaged open source software product wherein additional charges apply for AMI packaging, first-boot configuration and setup documentation. Run rclone v1.75.1 on Ubuntu 24.04 with a daily copy timer, local destination defaults, checksum check script, and optional customer object-storage destination via instance role.", "highlights": [ "Pinned rclone v1.75.1 official linux/amd64 binary with provenance receipts.", "Daily copy timer with local destination defaults and checksum check script.", "Bundled configuration, backup and day-2 operations documentation." ], "awsCategories": [ "Application Development" ], "logoUrl": "https://awsmp-logos.s3.amazonaws.com/15ad7fa735580cd36bd00f37ab5a71ea", "version": { "title": "0.1.0 (rclone v1.75.1)", "releasedAt": "2026-10-07T22:04:56.998Z", "usage": "Launch t3.medium with at least 16 GiB encrypted gp3 root storage. Connect as ubuntu with AWS Systems Manager Session Manager, or restrict SSH to your administrative CIDR. After first boot completes, follow /opt/sushi/docs/README.md for configuration. rclone has no inbound service port." }, "regions": 1, "entityId": "prod-f2gsp3anrssi2", "productCode": "cymzn75tplgm0cf1vwqifgqsw", "marketplaceUrl": "https://aws.amazon.com/marketplace/pp/prodview-6vckao5kd2vls", "docsUrl": "https://docs.softwaresushi.com/rclone/" } ] }