Launch faster on AWS. Keep control.
Start with one of 35 production-ready AMIs or bring in our team to assess, build, modernize, and optimize your workload—available through AWS Marketplace.
Skip the setup. Start with a hardened foundation.
Each AMI is delivered through AWS Marketplace and runs on Amazon EC2 in your account, with a step-by-step guide in our documentation. Add your credentials after launch and keep control of the infrastructure.
AI Agents
Self-hosted AI agents and agent runtimes on hardened Ubuntu.
OpenClaw AI Agent
v1.22.0Self-hosted OpenClaw AI agent on hardened Ubuntu. Connect Telegram, Slack or Discord with your own keys.
Hermes AI Agent
v2026.8.18Nous Research's Hermes AI agent on hardened Ubuntu, chatting on Telegram with your own model key.
Sushi OpenShell
v0.3.3NVIDIA OpenShell on Graviton: policy-controlled Docker sandboxes behind a private mTLS gateway.
OpenHands Core
v0.2.2Self-hosted OpenHands Agent Canvas with Python, terminal and Git tools, plus optional private Telegram.
Nanobot AI Agent
v0.2.3Self-hosted nanobot agent with a password-protected web UI, workspace file tools and private Telegram.
Agent Zero Core
v0.1.5Focused Agent Zero workbench with file, Bash and Python tools, your own cloud model and private Telegram.
ML & Data
Machine learning and analytics that run in your own account.
Sushi ML Studio
v1.1.0No-code machine learning in your browser: upload a spreadsheet, train scikit-learn models, predict.
DuckDB Analytics
DuckDB v1.5.6DuckDB CLI for fast local CSV and Parquet queries, with pinned extensions for reading your S3 data.
Networking & Security
Gateways, proxies, private access, DNS and secure file transfer.
Caddy HTTPS Gateway
caddy v2.11.7Caddy reverse proxy, private by default, with a per-instance local CA and automatic HTTPS.
HAProxy Community LTS
HAProxy 3.4.6HAProxy LTS HTTP load balancer with a password-protected stats page.
WireGuard Private Access
wireguard-tools 1.0.20260223WireGuard endpoint with keys generated on first boot and UDP 51820 closed until you add peers.
Unbound DNS Resolver
Unbound 1.26.1Validating, caching DNS resolver that answers on loopback only until you open it up.
OpenSSH SFTP Drop Box
OpenSSH 9.6p1OpenSSH SFTP drop box: key-only users locked to their own folder, with no shell.
Observability
Monitoring, status pages, logs, telemetry and notifications.
Uptime Kuma Monitoring
uptime-kuma v2.5.5Uptime monitoring with HTTP, TCP, DNS and ping checks behind a private HTTPS dashboard.
Gatus Status Page
gatus v5.37.0Status page with HTTP, TCP and DNS checks, SQLite history and per-instance TLS.
Fluent Bit Log Gateway
Fluent Bit 5.1.3Fluent Bit log gateway with HTTPS ingest, a bounded disk buffer and a local file output.
Vector Log Pipeline
Vector 0.58.0Vector log pipeline with authenticated HTTPS and file ingest, VRL redaction and a disk buffer.
OpenTelemetry Collector Gateway
otelcol 0.162.0OpenTelemetry Collector OTLP gateway for traces, metrics and logs, with TLS and file export.
Gotify Notification Server
Gotify 3.1.1-sushi1Private Gotify notification server with a REST API, web UI, live WebSocket stream and history.
Messaging & Data Services
Caches, brokers and connection poolers.
Valkey Single-Node Cache
Valkey 9.1.2Valkey single-node cache with loopback TLS, an ACL user, an LRU memory cap and no persistence.
PgBouncer Connection Pooler
PgBouncer 1.26.0PgBouncer PostgreSQL connection pooler with required client TLS and SCRAM authentication.
NATS Core Broker
nats-server v2.15.0NATS Core broker with loopback TLS, per-user subject permissions and the nats CLI.
Mosquitto MQTT Broker
mosquitto v2.1.2Eclipse Mosquitto MQTT broker with loopback TLS, users, topic ACLs and persistence.
Automation & Backup
Infrastructure as code, configuration management, backup and transfer.
OpenTofu Runner
OpenTofu 1.13.1OpenTofu with a pinned offline AWS provider mirror for validate and plan. Nothing auto-applies.
Ansible Core Runner
ansible-core 2.21.4ansible-core runner with pinned collections, a localhost inventory and a vault password.
Restic Backup Worker
restic v0.19.1restic backup worker: daily encrypted backups, a safe restore script and an optional S3 repository.
Rclone Transfer Worker
rclone v1.75.1rclone transfer worker: a daily checksum copy that never deletes, with an optional S3 target.
More products
Aider AI Pair Programmer - Software Sushi
Aider 0.86.2+sushi.2Aider is an AI pair programmer for your terminal.
AnythingLLM RAG Workbench - Software Sushi
AnythingLLM v1.17.0AnythingLLM is a self-hosted workspace for chatting with your own documents and websites (RAG) using the LLM and embedding providers you choose.
Goose CLI Agent - Software Sushi
Goose v1.54.0Goose is an open source AI agent for the command line.
LiteLLM Proxy - Software Sushi
LiteLLM 1.104.2LiteLLM Proxy gives all your applications one OpenAI-compatible API in front of the LLM providers you use, so you can switch or combine models and keep provider keys in one place without changing application code.
Open Interpreter - Software Sushi
Open Interpreter 0.4.2+sushi.2Open Interpreter lets a language model write and run code to get real work done from plain-English requests: analyze and chart data, clean up files, convert formats and automate scripts.
Open WebUI - Software Sushi
Open WebUI v0.11.4Open WebUI is a self-hosted, ChatGPT-style chat interface for any OpenAI-compatible model endpoint.
Qdrant Vector Database - Software Sushi
Qdrant v1.19.2Qdrant is an open source vector database for semantic search and retrieval-augmented generation (RAG).
Tabby Coding Assistant - Software Sushi
Tabby v0.32.0Tabby is an open source, self-hosted AI coding assistant server for code completion and chat, an alternative to hosted copilots.
AWS infrastructure, data transfer, messaging, and third-party model-provider charges are separate from AMI software charges. See each AWS Marketplace listing for current pricing and terms.
One AWS partner from first decision to steady-state operations.
Purchase a defined engagement through AWS Marketplace, request a private offer for your scope, and work directly with the engineers doing the delivery.
Make the right AWS investment
Clarify the business case, technical path, data readiness, and risks before committing to a larger build.
Ship production systems on AWS
Move from architecture to an operational application, backend, mobile experience, or cloud foundation.
- AI Application Development & DeploymentGenAI apps, RAG, agents, evaluation, UX, and deployment.
- AWS Backend ImplementationAPIs, data, identity, integrations, security, and observability.
- Mobile Application DevelopmentiOS, Android, and cross-platform apps backed by AWS services.
- AWS Cloud ImplementationSecure, scalable cloud foundations and delivery automation.
Get more from every AWS workload
Improve reliability, performance, maintainability, and cost without forcing a disruptive rewrite.
A faster path to buy, deploy, and operate.
Keep software and services inside a procurement channel your cloud and finance teams already understand—without sacrificing direct access to the people responsible for the outcome.
See the complete Software Sushi seller profileLaunch without rebuilding the stack
Use a preconfigured AMI when speed and repeatability matter.
Run it in your AWS account
You control the EC2 environment, access, region, and connected services.
Use Marketplace procurement
Choose usage-based AMIs or request custom pricing for a professional-services engagement.
Keep a human engineering partner
Get onboarding, troubleshooting, architecture, and optimization support from Software Sushi.
Marketplace access backed by delivery experience.
In one AWS engagement, our infrastructure audit and right-sizing work cut monthly cloud spend by 62% with zero downtime or performance impact, then added monitoring to prevent drift.
Read the AWS cost optimization case studyWhat your team will want to know.
Need a technical or procurement answer specific to your environment? We will map the cleanest path with you.
Ask an AWS engineerWhat is an Amazon Machine Image (AMI)?
An AMI is a reusable image containing the operating system and software needed to launch an Amazon EC2 instance. Our AMIs package the software and its maintained, security-hardened dependencies so you do not have to assemble that foundation from scratch.
Does the software run in our AWS account?
Yes. The AMI launches on Amazon EC2 in your AWS account. You choose and manage the infrastructure. Connected model providers, messaging channels, or other external services may still require outbound connections and their own accounts.
Are credentials included in the AMIs?
No. You provide your own credentials, such as model-provider keys or passwords, after launch. Every instance generates its own secrets on first boot.
Where is the documentation for each AMI?
Every AMI has a getting-started guide, configuration and operations pages at docs.softwaresushi.com, linked from each product below and from its AWS Marketplace listing.
When should we choose an AMI versus a professional service?
Choose an AMI when the packaged product already fits and you want a fast, repeatable launch. Choose a professional service when you need discovery, custom architecture, integrations, application development, modernization, or optimization around your specific workload.
How do professional-services purchases work?
Start from the relevant AWS Marketplace listing or speak with us first. We confirm the scope, delivery plan, and commercial terms, then can provide a private offer through AWS Marketplace for eligible engagements.
What costs are separate from the AMI price?
AWS infrastructure such as EC2, EBS, networking, and data transfer is billed separately. Model providers, messaging platforms, and other third-party services may also charge for their usage. Always review the current listing before subscribing.
Choose the fastest path to a working outcome.
Tell us what you need to launch, improve, or validate. We will help you decide whether an existing AMI or a scoped engineering engagement is the better fit.
AWS and AWS Marketplace are trademarks of Amazon.com, Inc. or its affiliates.