clean image after logging out

I have a few thoughts on this, given the information provided.

Upon user logout, you could terminate the EC2 instance, and create a new EC2 instance from the base AMI for the next session. This ensures that every new session starts with a clean state.

To automate this you could use Eventbridge and Lambda. Set up Eventbridge to watch for a specific event, like EC2 instance state change or a custom metric that indicates a user OS logout event. Then trigger an AWS Lambda function when the relevant event is detected. This Lambda function will handle the termination and recreation of the instance from an Golden AMI, or maybe revert the EBS volume from a snapshot to return the OS to the original state. https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-what-is.html https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-events.html

Another easier option could be to leverage Amazon WorkSpaces, a desktop-as-a-service solution that can be configured to revert to a clean state on user logout. https://aws.amazon.com/pm/workspaces/

I hope this was helpful, if so please remember to mark this answer as accepted. Good luck!