Products · Alibaba Cloud

Hardened images for Alibaba Cloud.

Hardened images for Alibaba Cloud International and Apsara Stack — aligned to China MLPS 2.0, PDPL and regional Asia-Pacific compliance regimes.

Why on Alibaba Cloud

The same hardened baseline, native to Alibaba Cloud.

Cloudgenics images on Alibaba Cloud are built and signed inside the platform — no shadow accounts, no third-party staging. Images publish into the regions you specify and integrate with native services like the platform's marketplace, KMS, secrets store and observability stack.

CIS Level 2, DISA STIG and Essential Eight controls applied at bake
Signed images with SLSA Level 3 provenance and SBOMs
Native integration with Alibaba Cloud key management and audit logs
Continuous patching with < 4 hour critical CVE SLA
Pre-mapped to 16+ global compliance frameworks

Talk to a Alibaba Cloud Engineer How hardening works

Image catalogue · Alibaba Cloud

What ships out of the box

Linux: RHEL 8/9, Ubuntu 20.04/22.04/24.04, Oracle Linux, SUSE
Windows Server 2019, 2022 and 2025 Core / Desktop Experience
Container host variants for Kubernetes and OpenShift workloads
Database hardened variants (PostgreSQL, MySQL, MS SQL, Oracle)
Bastion / jump-host hardened variants

Regions & sovereign coverage

Sovereign, government and commercial regions on Alibaba Cloud.

Alibaba Cloud International

Global

Apsara Stack (Sovereign)

On-premises & sovereign

Singapore / Indonesia

ap-southeast

Australia (Sydney)

ap-southeast-2

UAE (Dubai)

me-east-1

Saudi Arabia

Riyadh

Native integrations

Plug into the Alibaba Cloud services your teams already use.

Alibaba Cloud Marketplace

Listed for direct procurement and enterprise channel.

KMS & HSM

Customer-managed keys with HSM backing for regulated boundaries.

Cloud Security Center

Findings and posture appear in Cloud Security Center.

ActionTrail

Image audit events stream into ActionTrail for evidence retention.

MLPS 2.0 Mapping

Pre-mapped to China MLPS 2.0 Level 3 and Level 4 controls.

Container Service for K8s

Hardened ACK node images with full CIS L2 baseline.

Deployment

From marketplace to production in three steps.

Subscribe to the Cloudgenics image family inside the Alibaba Cloud marketplace or via private offer for your organisation.

Deploy

Launch instances from the hardened image using your existing infrastructure-as-code tooling — Terraform, Pulumi, Ansible or native CLI.

Operate

Telemetry streams to your SIEM; patches and configuration drift fixes ship continuously from the Cloudgenics control plane.