What is being deprecated?
Amazon Linux 2 reaches end of life. No more security patches, AMI publishing, or extras updates.
| Deadline | 2026-06-30 (8 days from build date 2026-06-22) |
|---|---|
| Service | EC2, EKS, ECS, Elastic Beanstalk |
| Affected resources | ami|launch-template|container-image |
| Severity | critical |
| Migration kit | al2023-gate (free, MIT) |
| Primary source | https://aws.amazon.com/blogs/aws/update-on-amazon-linux-2-end-of-life/ |
Every fact on this page is taken from the cited AWS / upstream source above. EOLkits ships no claim without a primary source.
Breaking changes
The following changes take effect at or before the 2026-06-30 deadline. [source]
- No security patches after EOL
- yum replaced with dnf
- amazon-linux-extras not available
- ntpd replaced with chronyd
- iptables replaced with nftables
- Python 2 no longer available
Migrate with the free al2023-gate CLI
The MIT-licensed CLI runs the same five-step migration on every deprecation: scan, fix, test, deploy canary, rollback. No AWS credentials needed for the offline fixture run.
Scan your infrastructure
Enumerate every resource still on the deprecated runtime.
pip install al2023-gate
al2023-gate scan --region us-east-1Review findings by severity × blast radius
The scan prints a table ordered by how much breaks and how soon.
Apply codemods (dry-run first)
Mechanically-safe rewrites for the breaking changes above. Everything ambiguous is flagged, not auto-changed.
al2023-gate apply --dry-run
al2023-gate applyDeploy with a staged canary + auto-rollback
5% → 25% → 50% → 100%, with a CloudWatch-alarm trip reverting instantly.
Want it done for you before 2026-06-30?
Audit PDF
Hash-anchored deterministic report scoring every Amazon Linux 2 EOL finding by severity × blast-radius, with a roll-forward roadmap and cost-of-not-fixing estimate. Delivered by email in 5 minutes. 30-day money-back guarantee.
Order Audit — $399Migration Pack
A real PR opened on your repo: al2023-gate codemods + IaC patches + canary plan + rollback. Auto-refund if your CI fails within 7 days.
Get Migration Pack — $1,499 How it worksNot ready to migrate yet?
Get a reminder before the 2026-06-30 Amazon Linux 2 EOL deadline — plus a heads-up on the next AWS EOL that hits your stack. No spam, one email per relevant deadline.
Free. Unsubscribe anytime.
Embed this deadline in your README
Drop a deadline badge into any repo still affected. It links back to this page, so your team — and anyone reading the repo — stays aware of the 2026-06-30 cutoff.
[](https://eolkits.com/migrate/amazon-linux-2-eol/)Frequently asked questions
When is the Amazon Linux 2 EOL deadline?
2026-06-30. Amazon Linux 2 reaches end of life. No more security patches, AMI publishing, or extras updates. [AWS source]
What happens if I don't migrate by 2026-06-30?
The breaking changes listed above take effect: No security patches after EOL; yum replaced with dnf; amazon-linux-extras not available; ntpd replaced with chronyd; iptables replaced with nftables; Python 2 no longer available. [source]
Which AWS services does this affect?
EC2, EKS, ECS, Elastic Beanstalk — specifically ami|launch-template|container-image resources.
Is there a free way to migrate?
Yes — the al2023-gate CLI is MIT-licensed and free for unlimited runs. The paid Audit ($299) and Migration Pack ($1,499) tiers add a hash-anchored report and an automated PR with a CI-failure refund guarantee.