Skip to content

Open WebUI

AI Platform & Data Open WebUI v0.11.4 Hardened AMI

Open WebUI is an Ubuntu 24.04 AMI that runs Open WebUI, a self-hosted, ChatGPT-style chat interface for any OpenAI-compatible model endpoint. It gives your team one private place to chat with the models you choose, with conversations, user accounts and model selection. The UI listens on loopback only, and you open it in your browser through Session Manager port forwarding.

Get started View on AWS Marketplace
AMI release
0.1.2 (Open WebUI v0.11.4)
Recommended
t3.medium
Storage
24 GiB+ encrypted gp3
Access
Session Manager, no inbound ports
Released
Oct 12, 2026
Delivery
Amazon Machine Image in your own AWS account

A private, ChatGPT-style chat UI for your team, connected to any OpenAI-compatible endpoint.

The UI binds to localhost and you reach it through Session Manager. The session secret is generated per instance.

No baked weights or keys. Chats and settings persist on your EBS volume.

Quick start

Full guide →
  1. Subscribe
  2. Launch the instance
  3. Connect
  4. Run the walkthrough
  5. Open the UI from your computer
  6. Create the admin account
  7. Connect a model

What is included

Component Details
Operating system Ubuntu 24.04 LTS, x86_64, CPU only
Open WebUI v0.11.4, in a pre-loaded container image built by Software Sushi on Ubuntu 24.04 with Python 3.12. The container runs as a non-root user.
Container runtime Docker, managed by systemd. The image is already on the instance; nothing is pulled at boot.
Services open-webui.service runs the UI. sushi-open-webui-firstboot.service prepares the instance on first boot.
Data /var/lib/open-webui, for users, chats and settings
Self-checks A walkthrough at /opt/sushi/docs/demo.sh and a self-test at /opt/sushi/bin/smoke.sh

No model weights, provider keys or user database are included. Local Ollama and CUDA bundles are not installed: you connect an external OpenAI-compatible endpoint, such as a hosted provider or a gateway you run.

Nothing secret is baked into the image. The session secret is created on your instance on first boot.

Ports

All listeners are on 127.0.0.1. Nothing listens on a public interface, and you do not need any inbound security group rule.

Address What it is
127.0.0.1:8080 Open WebUI, including /health and /ready
  • t3.medium (2 vCPU, 4 GiB RAM) or larger. At least 4 GiB RAM.
  • At least 24 GiB encrypted gp3 root volume.
  • IMDSv2, and outbound HTTPS to your model provider.

Billing

You pay an hourly software fee for each running instance, shown on the AWS Marketplace listing. An optional five-day free trial covers the software fee for one instance and then converts to hourly billing. It is the same software before and after the trial. EC2, EBS, data transfer and your model provider's charges are billed separately, including during the trial.

Where to go next

  • Getting started: launch, open the UI, create the admin account and connect a model.
  • Configuration: model connections, the environment file and opening the UI to your team.
  • Operations: security model, service management, logs, updates, backups and support.
  • Troubleshooting: common problems and fixes.

Upstream project

Open WebUI is published by Open WebUI Inc. under the Open WebUI License, which includes branding conditions. Software Sushi packages it independently and does not claim upstream endorsement. The license is on the instance at /usr/share/doc/open-webui/LICENSE.

Last updated October 14, 2026 · Suggest an improvement