Amazon Linux 2023
Protect applications and services that run on Amazon Linux 2023 systems.
Overview
Amazon Linux 2023 is the current AWS Linux distribution for cloud workloads. It runs on Amazon EC2 and related AWS compute. Pomerium can run on a supported architecture through the official RPM package, binary, or container.
Private services on AWS hosts can use one identity-aware route instead of direct public exposure or broad network access.
Amazon Linux 2023 supplies the runtime or deployment environment. Pomerium runs in that environment and supplies the identity-aware access point for selected services.
Prerequisites
- A supported Linux host that can accept the user-facing route and reach the private upstream service.
- DNS, TLS, identity-provider configuration, protected secrets, and durable storage where the selected design requires it.
How it works
Run Pomerium Core on a supported Linux host in the environment. Install the official package, standalone binary, or container. Configure DNS, TLS, identity, route policy, storage, and replicas for the selected design.
Install Pomerium Core from the official RPM repository with DNF, or use the official standalone binary or container. Place it in a subnet that can accept the user-facing route and reach the protected services.
Check service health, DNS, TLS, required storage and replicas, and upstream reachability. Confirm that a direct public route cannot bypass Pomerium.
Example
A private internal application runs on an Amazon Linux 2023 EC2 instance. Pomerium runs on a second instance in the same VPC and forwards approved requests to the application.
Considerations
- Use a supported Amazon Linux release.
- Pomerium does not manage EC2, Amazon Linux updates, IAM, security groups, or host hardening.
