Mr.PlanB Logo
    Enterprise Linux Ledger 2026
    Ledger
    Enterprise Linux Ledger 2026

    Amazon Linux 2023: Enterprise Linux Ledger 2026 Scorecard

    Amazon Linux 2023 is a free, quarterly updated distribution tuned for EC2, supported to 2029-06-30, with no in-place path to the next major.

    Edition October 16, 20268 min read

    Where Amazon Linux 2023 put its effort, 2024 to 2026

    Each square is one capability area in one year. The brighter it is, the more the area gained in the Enterprise Linux Ledger that year; 1, 2 and 3 mark that year's biggest pushes.

    ’24’25’26
    Lifecycle and upgrades
    Security and compliance1
    Hardware and architectures1
    Virtualization and cloud images
    Containers and Kubernetes host2
    Software currency and packaging
    Fleet management and automation
    Storage and filesystems
    Enterprise integration and certifications
    AI and GPU readiness3
    no change+0.5+1+1.5 or moreScores out of 5 per area.

    Biggest pushes overall: Security and compliance (+0.5), Hardware and architectures (+0.5), Containers and Kubernetes host (+0.5). Already strong in 2023: Lifecycle and upgrades, Security and compliance, Virtualization and cloud images.

    Top focus each year: 2025 Hardware and architectures; 2026 Security and compliance. 1 of 3 years show no gain in any area.

    Part of the Enterprise Linux Ledger (edition 2026-10-16). How the scores work: methodology.

    Snapshot

    • Type: product
    • Owner: Amazon Web Services (Amazon.com, Inc., public company)
    • Engine: Fedora derived package set with kernel.org long-term kernels (6.1, 6.12 and 6.18 offered side by side)
    • Licence: Open source packages; no charge; vendor support only through AWS Support plans on EC2; KVM, VMware and Hyper-V images run elsewhere without support
    • Latest release: 2023.12 quarterly line, build 2023.12.20261014 (2026-10-14)
    • Support lifecycle: GA 2023-03-15; standard support with quarterly minors to 2027-06-30; maintenance with security and critical fixes to 2029-06-30
    • Next milestone: End of standard support 2027-06-30; no successor major announced
    • Support window: About 4 years standard plus 2 years maintenance for the single major; no paid extension (source: AL2023 release cadence page)
    • Tier: Cloud vendor distribution
    • Archetype: Integrated stack, one cloud
    • Evidence grade: B. Lifecycle dates, kernel versions, live patching, FIPS status, SELinux defaults, Secure Boot and the off-EC2 image list were read from the AL2023 user guide and FAQ; the ECS and EKS AMI pages supplied the container and GPU facts. Partner, fleet and integration scores are inferred from AWS service documentation rather than from AL2023 pages, and the first release dates of the GPU AMIs were not retrieved.

    Scorecard

    DimensionScoreDirection
    Capability today63.0 / 100higher is better
    Momentum since 2023+4.5 pointshigher is better
    Credibility17.0 / 25higher is better
    Commercial risk6.0 / 25lower is better
    Technical lock-in8.0 / 25lower is better
    Integrator fit11.0 / 20higher is better
    AI leverage4.0 / 20higher is better
    Ledger Index58.7 / 100balanced weights; see the methodology

    Capability by domain, 2015 to today

    Scores 0 to 5 against fixed anchors; total is weighted to 100.

    Domain (weight)201520192022Today
    Lifecycle and upgrades (15)n/an/an/a3.5
    Security and compliance (15)n/an/an/a3.5
    Hardware and architectures (10)n/an/an/a3
    Virtualization and cloud images (10)n/an/an/a3
    Containers and Kubernetes host (10)n/an/an/a3.5
    Software currency and packaging (10)n/an/an/a3
    Fleet management and automation (10)n/an/an/a3
    Storage and filesystems (5)n/an/an/a3
    Enterprise integration and certifications (5)n/an/an/a2
    AI and GPU readiness (10)n/an/an/a3
    Total / 100n/an/an/a63.0

    Year by year: 2023: 58.5 · 2024: 58.5 · 2025: 61.5 · 2026: 63.0

    What moved the score

    YearDomainChangePointsTrigger
    2025AI and GPU readiness2.5 → 3+1.0ECS optimized AL2023 GPU and Neuron AMIs with NVIDIA and Neuron drivers preinstalled (first release dates unverified)
    2025Containers and Kubernetes host3 → 3.5+1.0EKS optimized AL2023 AMIs cover every supported Kubernetes version; EKS stopped AL2 AMIs on 2025-11-26
    2025Hardware and architectures2.5 → 3+1.0Kernel 6.12 option (2025-03) beside 6.1; x86-64 and Graviton arm64
    2026Security and compliance3 → 3.5+1.5FIPS 140-3 Level 1 validation of the kernel 6.1 cryptographic module (certificate 5369; the FAQ gives no validation date)

    Direction, 2023 to 2026

    Each release item carries one theme and one driver (V vision, C customer need, M market window, U upstream, P portfolio).

    DateItemThemeDriver
    2023-03AL2023 GA: quarterly minors, deterministic upgrades, IMDSv2 and UEFI preferred by defaultLifecycleP
    2023-03Container images and minimal AMIs published alongside the standard AMIContainersP
    2023-06CIS Amazon Linux 2023 Benchmark v1.0.0 (2023-06-26)SecurityC
    2025-03Kernel 6.12 optionHardwareU
    2025-07Kernel 6.12 cryptographic module submitted for FIPS 140-3 (2025-07-19)SecurityC
    2025-11EKS stops publishing AL2 AMIs (2025-11-26); AL2023 and Bottlerocket cover all supported versionsContainersP
    2026-03Kernel 6.18 optionHardwareU
    2026-04Kernel 6.18 cryptographic module submitted for FIPS 140-3SecurityC
    2026-06Amazon Linux 2 end of support (2026-06-30) with no paid extensionLifecycleP
    • Centre of gravity: Security (3), Lifecycle (2), Containers (2)
    • Blind spots (no items): Virtualization and cloud, Packaging, Fleet management, Storage, Enterprise integration, AI, Licensing, Governance
    • Driver mix: Vision 0%, Customer need 33%, Market window 0%, Upstream 22%, Portfolio 44%
    • Idea-to-need index: 0.00 (0 = demand-pulled, 1 = thesis-pushed)

    Credibility: 17.0 / 25

    CriterionScoreBasis
    Cadence4.5Quarterly minors since 2023 with dated builds every few weeks; the 2023.12 line was still being built on 2026-10-14
    Roadmap transparency3.5Public GitHub issue tracker and release notes; FIPS validation schedule published; no written roadmap and no successor named
    Say-do3.5Few promises made; kernel 6.1 FIPS validation completed, 6.12 pending inside its stated window; support dates have held
    Velocity3Minors add runtimes and kernels; structural change inside a major is rare by design
    Lifecycle stability2.5One major with 6 years total, no in-place upgrade to the next, and AL2 users had to rebuild by 2026-06-30

    Commercial risk: 6.0 / 25 (lower is better)

    CriterionScoreBasis
    Price and licence volatility0.5No charge, so nothing to raise; AWS Support plan prices apply only on EC2
    Purchase constraints1Free in any quantity; vendor support exists only bundled with an AWS Support plan on EC2
    Channel and access1Open download and public repositories; no partner programme and no resale, which is neutral for a free product
    Owner stability1AWS is a stable owner; the distribution exists to serve EC2
    Cost of staying supported2.5Six years per major, then a rebuild; no paid extension, as AL2's end on 2026-06-30 showed

    Technical lock-in: 8.0 / 25 (lower is better)

    CriterionScoreBasis
    Formats1RPM packages and standard qcow2, OVA and vhdx images
    Export path2No binary compatibility with RHEL or any Fedora release; leaving is a re-platform, eased by standard DNF and systemd
    Stack coupling1Nothing proprietary required; systemd-networkd and cloud-init are standard components
    Hardware / cloud coupling3Tuned for EC2 and Graviton; AWS Support covers it only on EC2; repositories are hosted by AWS
    Skills and tooling coupling1Fedora family skills transfer

    Integrator fit: 11.0 / 20

    CriterionScoreBasis
    Partner programme openness2AWS Partner Network covers it; nothing to resell and no distribution-specific programme
    Multi-tenancy and self-service2Tenancy comes from AWS accounts, not from the OS
    API and infrastructure-as-code4AMI IDs in SSM parameters, CloudFormation and Terraform, Systems Manager patching and live patching
    Skills and certification3AWS certifications cover it; no Linux-specific certification

    AI leverage: 4.0 / 20

    How the product uses AI, scored per year like capability. Only GA counts.

    Criterion20192022TodayLatest step
    AI workload supportn/an/a2.52025: ECS and EKS GPU and Neuron AMIs on AL2023; GPU sharing comes from Kubernetes and ECS, not from the OS
    AI platform stackn/an/a02023: None; Deep Learning AMIs on AL2023 were not confirmed on the pages read
    AI-assisted operationsn/an/a02023: None
    Agent opennessn/an/a1.52023: AWS APIs and Systems Manager drive instances; nothing specific to the OS

    Year by year: 2023: 3.5 · 2024: 3.5 · 2025: 4 · 2026: 4

    AI say-do, 2023 to 2026: 2 AI items announced; 2 GA, 0 still preview, 0 pending, 0 dropped. Both items are ECS AMIs on AL2023 with GPU or Neuron drivers preinstalled; their announcement dates were not retrieved.

    AL2023 carries NVIDIA and Neuron drivers in the ECS and EKS images that AWS builds, so GPU nodes work without extra steps on EC2. The distribution has no AI stack of its own, no assistant and no agent interface; the intelligence sits in AWS services around it.

    Reading

    Amazon Linux 2023 is a good operating system for one place. On EC2 it is free, patched quarterly, live patchable without a reboot and wired into Systems Manager, ECS and EKS, and its FIPS and CIS work is public. Off EC2 the images run but nobody supports them, and the lifecycle is one major of six years followed by a rebuild, with Amazon Linux 2 ending on 2026-06-30 and no paid extension on offer. A buyer should confirm that the 2029-06-30 date fits their refresh cycle, because no successor major has been named. The gap against RHEL-family distributions is portability rather than quality.

    Open questions and items to re-score

    • The date on which the kernel 6.1 cryptographic module completed FIPS 140-3 validation is not on the FAQ; the step is placed in 2026 per the research notes. Kernel 6.12 validation is expected between 2026-07 and 2027-01, kernel 6.18 in mid-2027 (vendor schedule).
    • First release dates of the ECS and EKS optimized AL2023 GPU, Neuron and NVIDIA AMIs were not retrieved; the containers and AI steps are dated 2025 on the verified AL2 AMI retirement.
    • Whether AWS Deep Learning AMIs are built on AL2023 was not confirmed on the pages read (background knowledge says yes).
    • No DISA STIG or Common Criteria evaluation for AL2023 was found; the CIS benchmark exists at v1.0.0 (2023-06-26).
    • A successor major (Amazon Linux 2025 or later) is not announced on the pages read; check before planning past 2027-06-30.
    • History of Amazon Linux 2 end-of-support date changes before 2026-06-30 is background knowledge and was not used in the scores.

    Related reading

    More from Enterprise Linux Ledger 2026