Preventing customers from copying proprietary software out of an AMI instance

Question

I'm new to AWS. I have been looking into trying to set up a seller store for selling a software product that my company produces. I was able to generate a customized AMI based on an Ubuntu 22.04 base AMI. In my customized version I installed the software that I would be selling access to for customers. My current understanding is that I would sell access to this customized AMI to customers who wish to use my software.  My main concern is that if I have a customer who gets access to this AMI and creates an instance from it, they would be able to simply SCP the compiled binaries of my code out of the instance and have personal access to my code. I haven't found any documentation regarding protecting IP on AMIs.

I've been trying to wrap my head around the 'proper' way to go about selling software using AWS, so I don't know if I'm thinking about this all wrong because I haven't found any documentation that explains a method for going about selling on the storefront.

1.) Can you sell access to an AMI, while also protecting any intellectual property that is on the AMI from being downloaded?
2.) What is the standard AWS method for going about selling software to customers?

Thank you,
Chris

Answer

Hi,

From your description, it seems that you rather want to implement a SaaS service than a product on EC2:. This whitepaper will give you all the possible options in that direction:

https://docs.aws.amazon.com/pdfs/whitepapers/latest/saas-architecture-fundamentals/saas-architecture-fundamentals.pdf

Best,

Didier

Answer

Hey Chris,

Welcome to the AWS world! Protecting your intellectual property on an AMI is indeed crucial. One approach you can consider is using AWS Marketplace, which allows you to sell software securely. AWS Marketplace provides built-in licensing options and helps protect your software from unauthorized access.

To prevent customers from copying your proprietary software, you might want to explore License Manager on AWS, which lets you enforce licensing rules. It can restrict usage to specific instances or users, preventing unauthorized copying.

Also, consider using AWS Identity and Access Management (IAM) roles to control permissions tightly. Restrict the access to only necessary resources and actions.

I faced a similar challenge when launching my product on AWS, and [using a](https://techbehindit.com/how-to/market-software-development-services/) combination of Marketplace, License Manager, and IAM really helped safeguard my code.

Answer

I believe the best thing for your company to do, is implement a licensing feature into the software. This will protect the code from being used unauthorised.
I dont believe there is a way to prevent the concern you are raising.

Preventing customers from copying proprietary software out of an AMI instance

Relevant content