I've been using AWS for years, but have never ventured outside the
Quick Start and
AWS Marketplace sections when launching an EC2 instance.
The AMIs from the
AWS Marketplace look trustable, they have a link to the seller profile, etc.:
Compare this to community AMIs, that seem to appear out of thin air, with no information whatsoever on who the heck created and uploaded it:
How to know where a Community AMI comes from? Can these be trusted?