Step 6: Launch EC2 Instance
EC2 (Elastic Compute Cloud) instances are virtual servers in AWS. You will launch two instances: a public-facing server and a private server for internal use.
Instance Configuration Summary
| Component | Public-Server | Private-Server |
|---|---|---|
| Subnet | PUBLIC ROUTE 10.0.1.x | PRIVATE ROUTE 10.0.2.x |
| IP Address | 10.0.1.100 | 10.0.2.200 |
| Auto-assign Public IP | Disabled | Disabled |
| Security Group | Public-Server | Private-Server |
| Key Pair | public-server-1 | private-server-1 |
Launch an EC2 Instance
- Navigate to EC2 Dashboard and click Launch instance.
The AWS Console displays all launch settings on a single page. Configure each section as described below.
Name and Tags
- Under Name, enter Public-Server (or Private-Server for the second instance).
Application and OS Images (AMI)
- Click Windows under Quick Start.
- Select Microsoft Windows Server 2022 Base from the AMI dropdown.
> Tip: Always select the latest available Windows Server version. Windows Server 2022 provides current security updates and is supported through October 2031.
Instance Type
- Select an instance type that matches your workload needs.
For ProPay, consider these guidelines:
| Workload | Recommended Type | vCPUs | RAM |
|---|---|---|---|
| Small office (1-5 users) | t3.medium | 2 | 4 GB |
| Medium office (5-15 users) | t3.large | 2 | 8 GB |
| Large office (15+ users) | t3.xlarge | 4 | 16 GB |
Key Pair (Login)
- Click Create new key pair.
- Enter a key pair name (no spaces):
- For Public-Server: public-server-1
- For Private-Server: private-server-1
- Select RSA for Key pair type.
- Select .pem for Private key file format.
- Click Create key pair and save the downloaded file securely.
- Click Edit next to Network settings.
- Select My-Company-VPC for the VPC.
- Select the appropriate subnet:
- For Public-Server: Select Public-Subnet (10.0.1.0/24)
- For Private-Server: Select Private-Subnet (10.0.2.0/24)
- Set Auto-assign public IP to Disable.
- Under Firewall (security groups), select Select existing security group.
- Choose the appropriate security group:
- For Public-Server: Select Public-Server
- For Private-Server: Select Private-Server
- Expand Advanced network configuration.
- Under Primary IP, enter the static IP address:
- Public-Server: 10.0.1.100
- Private-Server: 10.0.2.200
- Set the root volume size to at least 100 GB.
- Select gp3 (General Purpose SSD) for the volume type. This is the default and recommended storage type for most workloads.
- Add additional volumes as needed for data storage.
- Review all settings in the Summary panel on the right side of the page.
- Click Launch instance.
- Click View all instances to monitor the launch progress.
> Important: The key pair file is required to retrieve your Windows administrator password. Store it in a secure location. You cannot download it again.
Network Settings
Assign a Static Private IP
Configure Storage
> Tip: The gp3 volume type provides 3,000 IOPS and 125 MB/s throughput at no additional cost. For ProPay data storage, this is sufficient for most environments.
Launch the Instance
The instance status changes from Pending to Running when the server is ready.
Repeat for Second Instance
Repeat the entire process to launch the second instance (Private-Server) with the appropriate settings from the configuration summary table.