# Deploy in AWS

> Launch Cloud Management Platform (CMP) from AWS Marketplace

---

Site [llms.txt](/llms.txt)

---

<div class="alert alert-info" role="alert">


Cloud Management Platform (CMP) starts on the free tier, which supports up to 100 resources. To manage more, apply a paid license. See [Product license](/docs/cmp/configure/administration/product-license/).
</div>


## Subscribe to the CMP AMI

1. Log in to AWS.
1. Go to AWS Marketplace.
1. From the left-hand menu, select **Discover products**.
1. Search for **CloudBolt**.
1. Select **CloudBolt Cloud Management Platform**.
1. Select **View purchase options**.
1. Select **Subscribe**.
1. Select **Accept Terms to subscribe** and wait for the subscription process to complete.
1. Select **View Subscription**.
1. Select your subscription.
1. Select **Launch new instance**.
1. Select **Launch from EC2 Console**.
1. Select a **Region**. The default is US East (N. Virginia).
1. Select **Launch from EC2** and proceed to the next section.

## Configure the appliance

### Provide a name and tags

Enter a name for the instance. CloudBolt recommends adding at least a Name tag to identify the instance.

### Choose instance type

1. Select an instance type with at least 4 vCPUs and 16 GB of memory, such as m5.xlarge. See [Hardware guidelines](/docs/cmp/system-architecture/hardware-guidelines/).

### Add a key pair

A key pair consists of a public key that AWS stores and a private key file that you store, allowing you to connect to your instance securely.

1. Select **Create new key pair**.
1. Enter a **Key pair name**.
1. Select **Create key pair**.
1. Select **Download key pair** and store it securely.

   <div class="alert alert-warning" role="alert">


   This is your only opportunity to download the key file.
   </div>


### Configure network settings

1. Select a VPC or AWS EC2 network for the instance.
1. Select a Subnet. To access CMP from your browser, the subnet must have port 443 exposed.
1. Create or select an existing security group.
1. Change the Security group name to an identifiable label.
1. Change the Description to an identifiable label.
1. Select the security group you would like to use for this instance.

   Add the following rules to the security group as required:

   | Type | Protocol | Port range | Source | Description |
   | --- | --- | --- | --- | --- |
   | SSH | TCP | 22 | **My IP** or a range from your network administrator. Restrict this port to trusted IP addresses. | Administrator access to the appliance. Not required for end users. |
   | HTTP | TCP | 80 | Match the source you set for HTTPS. | Optional. Redirects browsers to HTTPS when https:// is not specified. |
   | HTTPS | TCP | 443 | 0.0.0.0/0, or route traffic through a web application gateway. | User access to the CMP web UI. |

### Configure storage

1. Size: 50 GB for a minimal install; increase to 100 GB for a production installation.
1. Encryption: Recommended. Choose a KMS Key.
1. Volume Type: gp3

## Launch Cloud Management Platform

1. Select **Launch instance**.
1. Locate your instance in the EC2 Instances dashboard, then select its Instance ID.
1. Under Public IPv4 address, select **Open Address**.

   At this stage, there will be no valid certificate for your appliance, so bypass the security warning in your browser to continue.
1. Create your administrator account, choose your license, and complete the Setup Wizard. See [Complete initial setup](/docs/cmp/get-started/complete-initial-setup/).