Windows Amazon EC2 tutorial: How to set up an EC2 instance


My article “” shows you how to set up Amazon Web Services’ compute service if you use Linux (specifically, Ubuntu Linux). But what if you are a Microsoft Windows shop? That’s what this article explains.

As long as you use a small instance size and haven’t already signed up, you can . Not all of the instance types (which vary by processor and memory) and storage sizes are free, but the UI guides you on what is and isn’t free. If you haven’t signed up, do that now.

(For a deeper , check out , but note he’s doing things the command-line way, whereas today you can do things the graphical way, as this post shows. Still, if you want to know what Route 53 and so on mean, read Hall’s article.)

To get started, sign into the .

. Doing so means you’ll bid on your instance, and if other people bid more but below the retail rate Amazon will shut you down. There’s not a lot of point to picking this when you’re using the free tier. Don’t check this, we’re bidding 0.

  • Network: This is the virtual private cloud. Basically, Amazon lets you have multiple isolated virtual networks. At the moment, we have only one. Leave that as it is.
  • Subnet: This is another way of isolating ranges of IPs. Let’s leave that alone too.
  • Auto-assign Public IP: We definitely need this enabled. Amazon instances can have two IPs: one that is a private IP that can only connect to other EC2 instances on the same VPC, and one public IP that you can connect to from anywhere on the internet. If you’re deploying a more intricate system, you’d have some instances that would only have private IPs. In this case, we need a public IP for sure; otherwise, we’d be unable to connect.
  • Shutdown Behavior: Here be dragons. Set this to Stop, which is the default. The Terminate option actually means delete or burn it all down with no fire insurance.
  • Enable Termination Protection: Leave this off for this example. Generally, I check this. It’s a safety that prevents you from deleting instances when you don’t mean to.
  • Monitoring: Amazon has a monitoring suite called CloudWatch. We do not need this for now.
  • Tenancy: What really makes the economics of EC2 work is that most of the time your instance is probably doing nothing. The Shared option makes the most sense for that, because you’re sharing the back-end resources with other users when your instance is not running, lowering your costs. However, if you’re trying to get maximum performance, you’d select Dedicated Host. There is also an option to have a Dedicated Instance, which means that it runs on a host dedicated for your use but multiple (of your) instances might run on the same hardware. In this example, choose Shared; we’re going for cheap.
  • Step 3: Configure instance details


    Step 4: Add storage to your instance

    Now, click Add Storage. Storage is disk space. You have the option of straight General Purpose (SSD), Provisioned IOPS (SSD), or Magnetic. Because the General Purpose storage is eligible for the free tier, pick that. If you need performance, you’d pick the Provisioned IOPS option. (I’m not sure why anyone would consider picking magnetic disks like the cave people used when I was little. We could have a big fat disk with a whopping 30GB, but here let’s stick with 8GB (the default). If we wanted, we could have more than one volume (disk partition), but we don’t, so click Next: Add Tags at the bottom.

    ec2 how to screen 05IDG

    Step 5: Add tags to your instance

    Tags are just key-value pairs associated with the instance. You can use them for whatever. At my work, we use them for cost centers and management. There are even scripts that automatically shut down instances if people leave them on. AWS is expensive and doing the equivalent of leaving the light switch on can drain the old bank account pretty quickly.

    In this example, we’re just doing a little test instance and not deploying a whole devops management suite, so you can just click Next: Configure Security Group.

    ec2 how to screen 06IDG

    Step 6: Configure your security group

    Before you do anything on the security screen, go to another browser tab and type the literal what is my ip. You’ll get an IP address like the fake one I just fudged on this screenshot ( This is a 32-bit IP address. Copy it.

    In Windows, the terminal services protocol you use to do a remote login is called RDP (). So, in the EC2 console’s Configure Security Group screen, RDP should be the Type that is selected.

    By default, Amazon firewalls off everything on your public instance IP. The default on this screen is to leave SSH open to, which means the whole world. Paste your IP into the text box and add /32 on the end. The /32 means the whole IP address and only this address.

    windows ec2 how to screen 07IDG

    If you put, any IP beginning with 71.182.95 would be able to get to the SSH port. If you put /16, anyone with an IP beginning 7.182 would get to the SH port. If you put /8, anyone whose IP started with 71 would get to the port. This is not to say they could log in; but they could connect to the TCP/IP port. Remember: Even .

    It is possible to use IPv6 addresses as well (if your IP is much longer and has :s, it is an IPv6 address). Just change the /32 to /128. Click Review and Launch to continue.

    Step 7: Review your instance

    This almost-final screen gives you a chance to correct any mistakes. I don’t make mistakes, so I just click Launch. But you might want to review your own work.

    Step 8: Launch your instance

    As a Windows user, you probably aren’t as used to downloading these key files like you do for SSH. However, definitely create a new key pair and download it and don’t lose it ever for Windows on EC2. You’ll need it to log in.

    After you download the key, click the Launch Instances button.

    If this is your first time in EC2, you’ll have to create a new key pair. If you’ve been in EC2 before, you can select one you’ve already used.

    You have to download the key before you can move on. Download the key, then click Launch Instance.

    windows ec2 how to screen 09IDG

    On the next screen, you’re told that your instance is in progress. Click on its instance ID (the long hex after “initiated”).

    ec2 how to screen 10IDG

    You’ll be taken to a status screen that shows the instance is pending. Either wait around or click the Refresh button until you get bored. 

    Once the instance finally comes up, right click it and select Get Windows Password.

    windows ec2 how to screen 11IDG

    Remember that key file? Choose it and click Decrypt Password.

    windows ec2 how to screen 12IDG

    The Retrieve Default Windows Administrator Password screen in EC2 is proof that Amazon hates Windows users and wants to torture them. You’re going to want to copy and paste that password because it’s on the long and random side. Unfortunately, the font in EC2 is such that you won’t notice that Amazon has put a space after the final character when you highlight it and copy it. If Windows tells you you have the wrong password, that is is probably why. (You can get to this screen again and ponder your hatred for the developer that did this to you.)

    windows ec2 how to screen 13IDG

    Now it’s time to use the Remote Desktop Protocol client. There are clients , various versions of Linux (such as ), and of course . In this tutorial, I’m using the Mac version, but they’re all similar. 

    Create a new connection. 

    windows ec2 how to screen 14IDG

    You’ll end up at a screen with a bunch of properties. Call it something, fill in the IP address (click on the instance on the EC2 console if you didn’t record it), and set Administrator as the user. Paste that password from the Decrypt Password screen. I hate having it in full-screen mode so I uncheck that.

    windows ec2 how to screen 15IDG

    Now find this new connection in the menu, select it, then click the Start button (right-arrow icon) at the top.

    You should see a screen with some ominous warning that something couldn’t be verified. This only shows up the first time. If it shows up next time then something is wrong. Click Continue.

    If all goes well, you should see the shiny Windows screen.

    But let’s not keep that running. So, go back to the EC2 instances screen. Right-click the instance and choose Instance State > Stop.

    windows ec2 how to screen 16IDG

    You’ll see an “are you sure?” screen. Click Yes, Stop.

    ec2 how to screen 16IDG

    Once the instance is stopped, it is as if the machine is off. However, it is still there eating up … well, nothing, because we picked the free tier, and you get 12 months free. But let’s terminate it anyhow for good hygiene. Right-click the instance and choose Instance State > Terminate.

    Once you do this, you get another “are you sure?” screen. Say Yes, Terminate. If that safety setting I mentioned earlier were on, you’d have to turn it off before you could actually terminate the instance.

    ec2 how to screen 18IDG

    Congratulations, you’ve created an instance, logged in to it, stopped it, and terminated it. Your journey has begun. Maybe next time, you can install some software on it and maybe create an AMI, but for now, enjoy your fun with EC2.

    Remember not to run up a large bill!