Amazon Corretto is one of the four credible OpenJDK distributions for enterprise estates. Compare patch cadence, LTS coverage, and support model before you commit.
OpenJDK is a project. Corretto is a downstream distribution. The difference matters when you are picking a runtime for production.
Once an estate decides to leave Oracle Java SE Universal Subscription, the next question is which OpenJDK distribution to use. Amazon Corretto sits in the top four every time.
Corretto is a downstream OpenJDK build maintained by AWS. The source is OpenJDK. The build, the testing, the patch cadence, and the LTS commitment come from Amazon.
This page sets out the comparison. What OpenJDK is, what Corretto adds, how the two compare side by side, and how to pick the right fit for your estate.
OpenJDK is the upstream open source Java project. Oracle, AWS, Microsoft, Azul, BellSoft, Red Hat, and the community all contribute.
OpenJDK is the source code. It is not a packaged binary. A user does not run OpenJDK directly. A user runs a build of OpenJDK produced by a vendor.
OpenJDK ships under the GNU General Public License version two with the Classpath Exception. Free for commercial use. No usage tracking. No employee count metric.
Vendors build OpenJDK from source, run their own test suites, sign the binaries, and publish them under their own brand. Corretto, Temurin, Microsoft Build, and Azul Zulu all follow this model.
Corretto is the OpenJDK build that AWS uses in production. Lambda, EKS, EC2 Java workloads. The scale of internal validation is large.
Corretto ships builds for Java 8, 11, 17, and 21 in 2026. Each LTS version is supported for at least eight years from initial release.
Corretto releases quarterly security patches aligned with the Oracle Critical Patch Update window. Out of band patches ship for critical vulnerabilities.
Corretto runs on Linux, macOS, Windows, and ARM. Native ARM builds are first class. Containers ship from the Amazon Linux base image.
Corretto is free. AWS does not sell paid support. Commercial support for Corretto inside AWS comes through standard AWS support plans.
Credible OpenJDK distributions, 2026 snapshot.
| Distribution | Backer | LTS Years | Paid Support | Best Fit |
|---|---|---|---|---|
| Amazon Corretto | AWS | 8 | No | AWS heavy estates |
| Eclipse Temurin | Eclipse Foundation | Community | No | Mixed cloud |
| Microsoft Build of OpenJDK | Microsoft | 6+ | No | Azure heavy |
| Azul Zulu | Azul | 8 | Yes | Regulated estates |
| BellSoft Liberica | BellSoft | 8 | Yes | Embedded and JDK Mission Control |
OpenJDK as a project is not directly comparable to Corretto as a distribution. The real comparison is Corretto against the other credible distributions.
All four credible distributions ship security patches on the quarterly OCPU calendar. Corretto and Microsoft Build often ship within hours of the OCPU. Temurin and Zulu typically ship the same day.
Corretto, Azul Zulu, and BellSoft Liberica all commit to eight years of LTS support. Temurin follows the community Adoptium LTS timeline. Microsoft Build commits to at least six years of LTS.
All four distributions are free for production use. Azul and BellSoft sell paid support contracts. Corretto, Temurin, and Microsoft Build do not.
OpenJDK is the source code. Corretto is the binary that runs Lambda. Pick the binary. Move on.
The decision is rarely about features. It is about cloud fit, support model, and the operating profile of the team running Java in production.
AWS heavy estates pick Corretto. Azure heavy estates pick Microsoft Build. Mixed estates pick Temurin. Regulated estates wanting paid support pick Zulu or Liberica.
Free distributions ship security patches but do not provide named support contacts. Azul and BellSoft sell that contact for a per server fee. Most enterprise estates can run without it.
Larger Java estates often standardize on one distribution to simplify packaging and patching. Smaller estates can mix distributions by workload without operational pain.
Whichever distribution you pick, the operating profile looks similar.
Distribute through existing channels. SCCM, Jamf, Intune, Ansible, container base images, or Homebrew.
Subscribe to the vendor security advisories. Patch on the OCPU cadence. Log version state across the estate for audit defense.
Most estates pin to one LTS release. Java 17 is the dominant pick in 2026. Java 21 adoption is accelerating.
Yes. Corretto ships under the OpenJDK license. Free for commercial production use, with no usage tracking and no employee count metric.
No. Corretto runs on any Linux, macOS, Windows, or ARM machine. AWS is not required.
AWS does not sell a Corretto support contract directly. Support comes through standard AWS support plans when Corretto runs on AWS. Outside AWS, most estates run without paid support.
Binary compatible for almost every workload. Same security patches. Quarterly cadence. No employee count metric and no Oracle audit exposure.
Corretto ships Java 8 builds. LTS coverage continues into the late 2020s. Many enterprise estates still run Java 8 in production.
Yes. The binaries are interchangeable. Many estates run Corretto on AWS workloads and Temurin or Microsoft Build elsewhere.
Oracle ULA exit moves, Java audit defence posture, certification framework, and the buyer side moves across the Oracle Database, Java, and EBS estate.
Used across more than five hundred enterprise engagements. Independent. Buyer side. Built for procurement leaders running the next renewal cycle.
Corretto runs every AWS Lambda function on the planet. If it can carry production workloads at that scale, it can carry yours.
500+ enterprise clients. 11 vendor practices. Industry recognized. One conversation can change what you pay for the next three years.
Monthly briefings on Oracle Java audit posture, OpenJDK migration moves, and the buyer side benchmarks across the Java estate.
Once a month. Audit patterns, renewal benchmarks, vendor commercial signals across Oracle, Microsoft, SAP, Salesforce, IBM, Broadcom, AWS, Google Cloud, ServiceNow, Workday, Cisco, and the GenAI vendors. No follow up sales pressure.
Free providers (Gmail, Yahoo, Outlook) cannot subscribe. Work email only. Unsubscribe in one click.