The Quick Starts on this page were built by AWS solutions architects based on AWS best practices for security and high availability. These reference deployments implement key technologies automatically on the AWS cloud, often with a single click and in less than an hour. You can build your test or production environment in a few simple steps, and start using it immediately.
Declarative, model-based configuration management solution on AWS
Learn more »
Foundation of the Chef DevOps platform for infrastructure management
Learn more »
Solution for cloud provisioning, configuration management, IT tasks
Learn more »
Task automation and system configuration for Microsoft Windows
Learn more »
Standardized AWS architecture that supports PCI DSS compliance
Learn more »
AWS architecture for NIST high-impact controls, featuring Trend Micro
Learn more »
Four servers in a single deployment: SharePoint, Lync, Exchange, SQL Server
Learn more »
Communications server that supports email, scheduling, messaging
Learn more »
Web application platform for content management and collaboration
Learn more »
Communications platform with IM, conferencing, and telephony
Learn more »
Windows Server directory service for managing network resources
Learn more »
Identity federation, SSO, pre-authentication, reverse proxy services
Learn more »
Secure, encrypted remote connections provided with RDP over HTTPS
Learn more »
Modular and scalable virtual networking foundation with Amazon VPC
Learn more »
Security solution with intrusion prevention, anti-malware, host firewall
Learn more »
E-commerce platform with marketing, SEO, and catalog management tools
Learn more »
| Puppet on AWS |
|
| Published |
March 2016 |
| Details | Puppet is a declarative, model-based configuration management solution from Puppet Labs that lets you define the state of your IT infrastructure, and automatically enforces that desired state on your systems. This Quick Start automates the launch of the Puppet master, performs the initial server setup, and creates both Linux and Windows-based Puppet agents within an Amazon VPC. The deployment is automated by an AWS CloudFormation template. The Quick Start also includes a deployment guide, which provides step-by-step deployment instructions and explains how you can configure and test your Puppet agents. |
| Time to deploy |
Approximately 20 minutes |
| Template | text | visual |
| Deployment guide |
HTML | PDF |
| Chef Server on AWS |
|
| Published |
December 2015 |
| Details | Chef Server is the highly scalable foundation of the Chef automation platform. You can use Chef Server to create and manage dynamic infrastructure that runs on the AWS cloud, or manage the servers in your on-premises data center. This Quick Start uses the official Chef Server AMI from the AWS Marketplace to make it easy to automate your infrastructure. You get instant access to Chef Server, including Chef Analytics, Chef Management Console, and Chef Reporting; consolidated hourly billing for Chef premium features and your AWS infrastructure; and the ability to manage 5-250 nodes. You can also choose to include an optional Chef workstation and managed node. The deployment is automated by an AWS CloudFormation template. The Quick Start also includes a deployment guide, which provides step-by-step deployment instructions and explains how you can get started with Chef—configure a Chef workstation, create and upload a cookbook, and bootstrap an EC2 instance with Chef command-line tools. |
| Time to deploy |
Approximately 35 minutes |
| Template | text | visual |
| Deployment guide |
HTML | PDF |
| Ansible Tower on AWS |
|
| Published |
April 2016 |
| Details | Ansible is an IT DevOps tool that handles cloud provisioning, configuration management, application deployment, intra-service orchestration, continuous delivery, and many other IT processes. Ansible Tower is a web-based user interface for Ansible. This Quick Start automatically deploys Ansible Tower on the AWS cloud. It includes separate templates for CentOS and RHEL. The deployment guide provides step-by-step instructions for preparing your AWS account, deploying the software, signing up for a free, 10-host trial version of Ansible Tower, and managing Amazon EC2 instances with Ansible Tower. |
| Time to deploy |
Approximately 20 minutes |
| Template | For CentOS: text | visual For RHEL: text | visual |
| Deployment guide |
HTML | PDF |
| Windows PowerShell DSC on AWS |
|
| Published |
September 2014 (last update: March 2015) |
| Details | This Quick Start launches a Microsoft Windows PowerShell Desired State Configuration (DSC) pull or push server environment on the AWS cloud, using AWS services such as Amazon EC2, Elastic Load Balancing, and Amazon VPC with PowerShell DSC. You can use the AWS CloudFormation template included in this guide as a point of reference for implementing your own configuration management solution, or you can deploy the environment automatically to test a fully configured PowerShell DSC pull or push server infrastructure. The deployment guide explains how to use AWS CloudFormation and PowerShell DSC to bootstrap your servers and applications from scratch, and how to make sure that your instances are resilient to configuration drift once your application stack has been deployed. |
| Time to deploy |
Approximately one hour |
| Template | For pull server environment: text | visual For push server environment: text | visual |
| Deployment guide |
HTML | PDF | Japanese |
| Standardized Architecture for PCI DSS on AWS |
|
| Published |
May 2016 (last update: June 2016) |
| Details | This Quick Start deploys a standardized architecture that helps organizations with workloads that fall in scope for Payment Card Industry (PCI) Data Security Standard (DSS) compliance. The Quick Start includes a deployment guide, which provides step-by-step instructions for deploying and configuring the environment, AWS CloudFormation templates that automate the deployment, and a security controls reference, which maps security controls to design decisions, features, and configuration of the reference architecture. This Quick Start is part of a set of AWS Enterprise Accelerator – Compliance solutions, which help streamline, automate, and implement secure baselines in AWS—from initial design to operational security readiness. |
| Time to deploy |
Approximately 30 minutes |
| Template | text | visual (main template, which references nested templates) |
| Deployment guide |
HTML | PDF |
| Security controls matrix |
Excel spreadsheet |
| Standardized Architecture for NIST-based Frameworks on AWS |
|
| Published |
January 2016 (last update: June 2016) |
| Details | This Quick Start deploys a standardized architecture that helps organizations with workloads that fall in scope for any of the following: - National Institute of Standards and Technology (NIST) SP 800-53 and 800-171 The Quick Start includes a deployment guide, which provides step-by-step instructions for deploying and configuring the environment, AWS CloudFormation templates that automate the deployment, and a security controls matrix, which maps security controls to design decisions, features, and configuration of the reference architecture. This Quick Start is part of a set of AWS Enterprise Accelerator – Compliance solutions, which help streamline, automate, and implement secure baselines in AWS—from initial design to operational security readiness. |
| Time to deploy |
Approximately 30 minutes |
| Template | text | visual (main template, which references nested templates) |
| Deployment guide |
HTML | PDF |
| Security controls matrix |
Excel spreadsheet |
| Standardized Architecture for NIST High-Impact Controls on AWS - Featuring Trend Micro Deep Security |
|
| Published |
June 2016 |
| Details | This Quick Start deploys a standardized architecture that helps organizations meet the following requirements: - NIST SP 800-53 (Revision 4) high-impact security control baseline, for workloads that are categorized as high-impact systems, per NIST FIPS Publication 199 The Quick Start includes a deployment guide, which provides step-by-step instructions for deploying and configuring the environment, AWS CloudFormation templates that automate the deployment, and a security controls matrix, which maps security controls to design decisions, features, and configuration of the reference architecture. This Quick Start is part of a set of AWS Enterprise Accelerator – Compliance solutions, which help streamline, automate, and implement secure baselines in AWS—from initial design to operational security readiness. |
| Time to deploy |
Approximately one hour |
| Template | text | visual (main template, which references nested templates) |
| Deployment guide |
HTML | PDF |
| Security controls matrix |
Excel spreadsheet |
| Microsoft Servers on AWS |
|
| Published |
June 2016 |
| Details | This Quick Start deploys four popular Windows servers in an optimized environment on AWS: SQL Server, Exchange Server, Lync Server, and SharePoint Server. The deployment also includes Active Directory Domain Services as the foundation for these business productivity servers. The Quick Start provides an AWS CloudFormation template that automates the deployment. It also features a deployment guide that discusses the architecture and implementation, provides step-by-step instructions for deploying and testing the environment, and explains customization options, so you can quickly establish a test or production environment for this mission-critical enterprise platform. The deployment guide also includes best practices, based on lessons learned from the internal Microsoft production environment on AWS. This Enterprise Accelerator offering delivers high availability, security, and performance while maintaining on-premises compatibility for leveraging licenses, third-party tools, and back-office customizations. AWS delivers stability, lower costs, and flexibility so you can make the pragmatic cloud-first or hybrid cloud choices you need to make, when you need to make them. |
| Time to deploy |
3-4 hours |
| Template | text | visual |
| Deployment guide |
HTML | PDF |
| Exchange Server on AWS |
|
| Published |
January 2015 (last update: September 2015) |
| Details | This Quick Start deploys Microsoft Exchange Server 2013 in a highly available architecture on the AWS cloud, using AWS services and best practices. The Quick Start includes two automated AWS CloudFormation templates. The main template deploys Exchange Server 2013 with Active Directory Domain Services (AD DS) in a new Amazon VPC. A separate template deploys Exchange Server 2013 into an existing Amazon VPC, for customers who have already set up AD DS. The automated AWS CloudFormation templates build the minimal infrastructure required to run Exchange Server 2013 on AWS with high availability for a small deployment that supports 250 mailboxes. The deployment guide provides guidance for two additional deployment scenarios (for 250 and 2,500 mailboxes) that support the Microsoft preferred architecture for Exchange Server. You can use any of these scenarios as a starting point for your own implementation. To install Exchange Server with other Windows servers on AWS in a single deployment, see the Quick Start for Microsoft servers. |
| Time to deploy |
Approximately 3 hours |
| Template | For Exchange and AD DS in new VPC: text | visual For Exchange in existing VPC: text | visual |
| Deployment guide |
HTML | PDF |
| SQL Server with WSFC on AWS |
|
| Published |
July 2014 (last update: September 2015) |
| Details | This Quick Start implements a high availability solution built with Microsoft Windows Server and SQL Server running on Amazon EC2, using the AlwaysOn Availability Groups feature of SQL Server Enterprise edition. The deployment includes Windows Server Active Directory with Windows Server Failover Clustering (WSFC) and clustered SQL Server 2012 or 2014 instances on the AWS cloud. This infrastructure provides the underpinnings for many Microsoft technology-based solutions for the enterprise, including Microsoft SharePoint and .NET Framework applications. To install SQL Server with other Windows servers on AWS in a single deployment, see the Quick Start for Microsoft servers. |
| Time to deploy |
Approximately 3 hours |
| Template | text | visual |
| Deployment guide |
HTML | PDF |
| See also | webinar | slides |
| Lync Server on AWS |
|
| Published |
June 2015 (last update: September 2015) |
| Details | This Quick Start helps you build a Microsoft Lync Server 2013 environment on the AWS cloud in a fault-tolerant and affordable way. Lync Server 2013 is a communications software platform that offers instant messaging (IM), presence, conferencing, and telephony solutions for small, medium, and large businesses. To install Lync Server with other Windows servers on AWS in a single deployment, see the Quick Start for Microsoft servers. |
| Time to deploy |
Approximately 2 hours |
| Template | text | visual |
| Deployment guide |
HTML | PDF |
| Active Directory Domain Services on AWS |
|
| Published |
March 2014 (last update: July 2016) |
| Details | This Quick Start deploys Microsoft Active Directory Domain Services (AD DS) on the AWS cloud. AD DS and Domain Name Server (DNS) are core Windows services that provide the foundation for many Microsoft-based solutions for the enterprise, including Microsoft SharePoint, Microsoft Exchange, and .NET Framework applications. The Quick Start is designed for organizations running workloads in the AWS cloud that require secure, low-latency connectivity to AD DS and DNS services. The Quick Start includes a deployment guide that describes the architecture and provides step-by-step instructions for deploying AD DS on AWS, and AWS CloudFormation templates that automate the deployment into your AWS account. The AWS CloudFormation templates support three scenarios: deploying a new cloud-based AD DS environment that you manage yourself, extending your existing on-premises AD DS to the AWS cloud, and deploying AD DS with AWS Directory Service. For each scenario, you also have the option to create a new Amazon VPC or use your existing Amazon VPC infrastructure. |
| Time to deploy |
Approximately 1 hour |
| Template | For new AD DS: For extending your existing AD DS: For new AD DS with AWS Directory Service: |
| Deployment guide |
HTML | PDF |
| Web Application Proxy and Active Directory Federation Services on AWS |
|
| Published |
August 2015 (last update: September 2015) |
| Details | This Quick Start deploys Web Application Proxy and Active Directory Federation Services (AD FS) on the AWS cloud. These two components of Microsoft Windows Server 2012 R2 provide identity federation, single sign-on (SSO), reverse proxy, and pre-authentication services for publishing your web applications in AWS. The Quick Start includes a deployment guide that describes the architecture for implementing Web Application Proxy and AD FS on AWS, and AWS CloudFormation templates that automate the deployment. |
| Time to deploy |
Approximately 1.5 hours |
| Template | For new VPC: text | visual For existing VPC: text | visual |
| Deployment guide |
HTML | PDF |
| Remote Desktop Gateway on AWS |
|
| Published |
April 2014 (last update: July 2016) |
| Details | This Quick Start deploys Remote Desktop Gateway (RD Gateway) on the AWS cloud. The RD Gateway uses the Remote Desktop Protocol (RDP) over HTTPS to establish a secure, encrypted connection between remote users on the Internet and Amazon EC2 instances running Microsoft Windows, without needing to configure a virtual private network (VPN) connection. This enables you to reduce the attack surface on your Microsoft Windows-based instances while providing a remote administration solution for administrators.
The deployment guide describes the architecture and implementation in detail. |
| Time to deploy |
Approximately 1 hour |
| Template | For new VPC: text | visual For existing VPC (standalone): text | visual For existing VPC (domain-joined): text | visual |
| Deployment guide | HTML | PDF |
| See also |
webinar | slides |
| SAP Business One, version for SAP HANA, on AWS |
|
| Published |
April 2015 (last update: May 2015) |
| Details | This Quick Start enables you to automatically deploy SAP Business One, version for SAP HANA, on the AWS cloud. SAP Business One, version for SAP HANA, is an integrated enterprise resource planning (ERP) solution designed for dynamically growing small and midsize businesses. This solution is powered by SAP HANA, which is an in-memory database management system that provides fast, predictable performance. You can use the AWS CloudFormation templates included with the Quick Start to deploy SAP Business One either into a new Amazon VPC or into an existing Amazon VPC in your AWS account. The Quick Start configures the Amazon VPC with two subnets (public and private), and sets up Remote Desktop Protocol (RDP) and network address translation (NAT) instances in the public subnet. On the private subnet, the Quick Start deploys SUSE Linux Enterprise Server (SLES) and Microsoft Windows Server instances, configures storage and other AWS resources, and installs the SAP HANA database and SAP Business One application components. Review the deployment guide for architectural considerations and step-by-step deployment instructions. |
| Time to deploy |
Approximately 1.5 hours, plus additional time to download and stage the SAP media |
| Template | For new VPC: text | visual For existing VPC: text | visual |
| Deployment guide | HTML | PDF |
| Trend Micro Deep Security on AWS |
|
| Published |
June 2015 (last update: May 2016) |
| Details | This Quick Start Automates the deployment of Trend Micro Deep Security on the AWS cloud, using AWS services and best practices. Because this Quick Start uses AMIs from the AWS Marketplace, you must subscribe to Trend Micro Deep Security from the AWS Marketplace before you launch the Quick Start. To subscribe, choose the Per Protected Instance Hour or Bring Your Own License option. Trend Micro Deep Security is a host-based security product that provides Intrusion Detection and Prevention, Anti-Malware, Host Firewall, File and System Integrity Monitoring, Log Inspection, and Content Filtering modules in a single agent running in the guest operating system. This Quick Start deploys Trend Micro Deep Security into an existing Amazon VPC using AWS CloudFormation templates. The Quick Start includes templates for two license models: Per Protected Instance Hour and Bring your own License (BYOL). With the Per Protected Instance Hour deployment option, your costs will be determined by the number of instances you're protecting each hour, and will show up on your AWS bill. The BYOL deployment option requires the purchase of Deep Security software licenses. Note that Per Protected Instance Hour licensing is currently available in three regions: US East (N. Virginia), US West (Oregon), and EU (Ireland). |
| Time to deploy |
Approximately one hour |
| Template | For Per Protected Instance Hour license: text | visual For BYOL license: text | visual |
| Deployment guide | HTML | PDF |
(You must first subscribe to Deep Security with the Per Protected Instance Hour option.)
(You must first subscribe to Deep Security with the BYOL option.)
| Magento on AWS |
|
| Published |
September 2015 |
| Details | This Quick Start deploys Magento Community Edition on the AWS cloud. Magento is an open-source content management system for e-commerce websites. This automated deployment builds a cluster that runs Magento along with optional sample data, which lets you experiment with custom themes and view the web store. The Quick Start includes a deployment guide that describes the Magento architecture on AWS, provides step-by-step instructions for deploying and configuring the software, and discusses design and performance considerations. The Quick Start also includes AWS CloudFormation templates that automate two deployment options: The first template provides end-to-end deployment into a new Amazon VPC, and the second template deploys Magento into your existing AWS infrastructure. |
| Time to deploy |
15-30 minutes |
| Template | For new VPC: text | visual For existing VPC: text | visual |
| Deployment guide | HTML | PDF | Japanese |
| Cloudera Enterprise Data Hub on AWS |
|
| Published |
October 2014 (last update: July 2016) |
| Details | This Quick Start helps you build a multi-node Cloudera Enterprise Data Hub (EDH) cluster on the AWS cloud by integrating Cloudera Director with AWS services such as Amazon EC2 and Amazon VPC. EDH enables you to store your data with the flexibility to run a variety of enterprise workloads--including batch processing, interactive SQL, enterprise search, and advanced analytics--while utilizing robust security, governance, data protection, and management. This Quick Start helps you build the infrastructure to support Cloudera EDH in a flexible, scalable, and cost-effective way. It includes two automated AWS CloudFormation templates. The first template deploys Cloudera EDH into a newly created Amazon VPC in your AWS account. The second template deploys Cloudera EDH into an existing Amazon VPC, for customers who have already set up their AWS infrastructure. The deployment guide discusses architectural considerations and configuration steps. |
| Time to deploy |
Approximately 30 minutes |
| Template | For new VPC: text | visual For existing VPC: text | visual |
| Deployment guide | HTML | PDF |
| MongoDB on AWS |
|
| Published |
April 2015 |
| Details | This Quick Start deploys MongoDB on the AWS cloud in a flexible, scalable, and cost-effective way, using AWS services and best practices. MongoDB is an open source, NoSQL database that provides support for JSON-styled, document-oriented storage systems. It supports a flexible data model that enables you to store data of any structure, and provides a rich set of features, including full index support, sharding, and replication. The Quick Start includes two automated AWS CloudFormation templates. The first template deploys MongoDB into a newly created Amazon VPC in your AWS account. The second template deploys MongoDB into an existing Amazon VPC, for customers who have already set up their AWS infrastructure. Customization options include the MongoDB version (2.6 or 3.0), the number of replica sets (1 or 3), the number of shards (up to 3), the number of micro-shards per node, and storage types and sizes. The guide walks you through the deployment and configuration process. |
| Time to deploy |
Approximately 15 minutes |
| Template | For new VPC: text | visual For existing VPC: text | visual |
| Deployment guide | HTML | PDF | Japanese |