Hardened Red Hat Enterprise Linux 8 (Ootpa) images for AWS

Select the architecture your workload already supports. Each option has its own product page and AWS Marketplace destination.

02 · PRODUCT FOUNDATION

The architecture changes. The product intent does not.

Citadel maintains the same PCI-focused operating-system intent across the available native builds. Your team can choose the architecture that fits the workload without maintaining a separate hardening approach.

03 · EVALUATION PATH

Choose, subscribe, and validate before production.

1. 01
   Choose the architecture.

   Select x86_64, or ARM64 for AWS Graviton after confirming application and dependency support.

2. 02
   Review the architecture page.

   Confirm the exact operating system, product focus, and AWS Marketplace destination.

3. 03
   Subscribe through AWS.

   Review live pricing, regions, terms, release details, and compatible instance types before subscribing.

4. 04
   Validate the real workload.

   Test bootstrap, agents, dependencies, application deployment, and security checks outside production.

04 · RESPONSIBILITY BOUNDARY

The image addresses the operating-system layer—not the entire PCI environment.

Citadel maintains the image-level baseline described by the selected product. Your team remains responsible for the application, cloud architecture, identity, networking, logging, deployment, operational controls, retained evidence, and assessor decisions.