What is Bottlerocket?
Bottlerocket is a Linux-based open-source operating system that AWS purpose-built for running containers. Unlike a general-purpose distribution, Bottlerocket includes only the software required to run containers. That reduces the attack surface and lowers the effort spent on patch and update cycles.
Updates are applied atomically in a single step and can be rolled back automatically if a problem occurs. Combined with container orchestration services, this lets you automate operating system management across entire node fleets.
Core capabilities
- Minimal footprint: Only the software needed for containers, no general-purpose system tooling
- Atomic updates: Single-step updates with automatic rollback capability
- Hardening: CIS hardened against the CIS Bottlerocket Benchmark v1.0.0
- Open source: Open development model with support for custom builds
- AWS integrations: Built-in integrations with AWS services
- EC2 optimization: Tuned for running on Amazon EC2
Typical use cases
Kubernetes worker nodes: Amazon EKS clusters use Bottlerocket as the node operating system and benefit from a reduced attack surface and simplified updates.
Large container fleets: The single-step update mechanism with rollback lowers operational effort when many nodes have to be patched regularly.
Security requirements: Organizations with strict hardening requirements use Bottlerocket to keep the amount of installed software on container hosts small.
Benefits
- Smaller attack surface through a minimal software footprint
- Less operational effort through atomic updates with rollback
- Higher uptime through simplified update mechanisms
- No additional charge beyond regular EC2 pricing
Integration with innFactory
As an AWS Reseller, innFactory supports you with Bottlerocket: migrating existing EKS and ECS node groups, building automated update processes, and aligning hardening requirements with compliance evidence.
Typical Use Cases
Technical Specifications
Frequently Asked Questions
What is Bottlerocket?
Bottlerocket is a Linux-based open-source operating system that AWS purpose-built for running containers. It includes only the software required to run containers, which reduces the attack surface and the maintenance overhead.
How do updates work?
Bottlerocket applies updates atomically in a single step and can roll back automatically if something goes wrong. The update process can be automated through container orchestration services.
Which orchestrators are supported?
AWS names Amazon EKS as the focus of the provided variants. Through the open-source development model you can additionally create custom builds for your preferred orchestrator.
How much does Bottlerocket cost?
AWS states there is no additional charge for Bottlerocket itself. You pay the standard prices for Amazon EC2 and the other AWS services you use.
Is Bottlerocket hardened?
Bottlerocket is CIS hardened against the CIS Bottlerocket Benchmark v1.0.0. Combined with the reduced software footprint, this lowers the attack surface compared with a general-purpose Linux distribution.
Note: All product information on this page has been compiled with care, but is provided without guarantee and may be outdated or incomplete. Cloud services evolve rapidly — features, pricing, SLAs, and availability change frequently. Authoritative and up-to-date information can only be found on the official product page of AWS (official documentation). This page does not represent an offer by AWS.