1.2 — On the Instances tab of the Lightsail homepage, choose Create instance. 

1.3 — Choose the AWS Region and Availability Zone for your instance. 

1.4 — Choose your instance image. First choose Linux/Unix as the platform, then select Magento as the blueprint. 

1.5 — Choose your instance plan. Since upgrading the Magento applications and extensions you obtain from Magento Marketplaces and other sources can require up to 2GB of RAM, we recommend you use the $10 instance plan or larger.

1.6 — Enter a name for your instance. 

1.7 — Choose one of the following to add tags to your instance: 

Add key-only tags or Edit key-only tags (if tags have already been added). Enter your new tag into the tag key text box, and press Enter. Choose Save when you’re done entering your tags to add them, or choose Cancel to not add them. This is shown in the first screenshot. 

1.8 — Click Create instance. 

Your instance will become available after a few minutes. 

2.1 — On the Instance management page, under the Connect tab, choose Connect using SSH. It will take a moment for your instance to become available. 

2.2 — After you're connected, enter the following command to get the default application password. 

You should see a response similar to the following screenshot, which contains the default application password. Store this password in a safe place. You will use it in the next section of this tutorial to sign in to the administration dashboard of your Magento website.

3.1 — On the instance management page, under the  Networking  tab, choose  Create a static IP or Attach static IP (if you previously created a static IP that you can attach to your instance), then follow the instructions on the page.

For more information, see Create a static IP and attach it to an instance in Amazon Lightsail.

3.2 —  After the new static IP address is attached to your instance, you must complete the following steps to make the Magento software aware of the new static IP address.

Make a note of the static IP address of your instance. It's listed in the header section of your instance management page.

3.3 — On the Instance management page, under the Connect tab, choose Connect using SSH.

3.4 —  After you're connected, enter the following command. Be sure to replace <StaticIP>  with the new static IP address of your instance.

The second code block is an example. 

After you entered the command you should see a response similar to the following screenshot. The Magento software should now be aware of the new static IP address. 

Note: Magento does not currently support IPv6 addresses. You can enable IPv6 for the instance, but the Magento software will not respond to requests over the IPv6 network.

4.1 — In the Lightsail console, make note of the public or static IP address that is listed in the header area of the instance management page.

4.2 —  Browse to the following address to access the sign in page for the administration dashboard of your Magento website. Be sure to replace <InstanceIpAddress> with the public or static IP address of your instance.

The second code block is an example. 

4.3 — Enter the default user name (user), the default application password you got earlier in this guide, and choose Log in.

The Magento administration dashboard appears, as shown in the second screenshot. 

To change the default user name or password that you use to sign in to the administration dashboard of your Magento website, choose System in the navigation pane, and then choose All Users. For more information, see Adding users in the Magento documentation.

5.1 — On the Lightsail console home page, under the  Networking  tab, choose  Create DNS zone, then follow the instructions on the page.

For more information, see Creating a DNS zone to manage your domain’s DNS records in Amazon Lightsail.

5.2 — After your domain name is routing traffic to your instance, you must complete the following steps to make the Magento software aware of the domain name.

On the Instance management page, under the Connect tab, choose Connect using SSH.

5.3 — After you're connected, enter the following command. Be sure to replace <DomainName> with the domain name that is routing traffic to your instance.

You should see a response similar to the following screenshot. The Magento software should now be aware of the domain name.

6.1 — On the instance management page, under the Connect tab, choose Connect using SSH.

6.2 — After you're connected, enter the following command to start the bncert-tool.

You should see a response similar to the following screenshot. Note: The bncert tool does not support the configuration of redirections for Magento instances. You will not be able to configure non-www to www redirect (or vice-versa), and HTTP to HTTPS redirect using the bncert tool, but we will show you how to configure that through the Magento administration dashboard later in these steps.

6.3 — Enter your primary domain name and alternate domain names separated by a space as shown in the following screenshot.

6.4 — The changes that are going to be made are listed. Type Y and press Enter to confirm and continue.

6.5 — Enter your email address to associate with your Let's Encrypt certificate and press Enter.

6.6 —  Review the Let's Encrypt Subscriber Agreement. Type Y and press Enter to accept the agreement and continue.

The actions are performed to enable HTTPS on your instance, including requesting the certificate and configuring the redirections you specified. This is shown in the second screenshot. 

Lastly, your certificate is successfully issued and validated, and the redirections are successfully configured on your instance if you see a message similar to the following example. The bncert tool will perform an automatic renewal of your certificate every 80 days before it expires. Continue to the next set of steps to finish enabling HTTPs on your Magento website.

6.7 — Browse to the following address to access the sign in page for the administration dashboard of your Magento website. Be sure to replace <DomainName> with the registered domain name that is routing traffic to your instance.

6.8 — Enter the default user name (user), the default application password you got earlier in this guide, and choose Log in. 

The Magento administration dashboard appears as shown in the second screenshot. 

6.9 — Choose Stores in the navigation pane, and then choose Configuration. 

6.10 — Choose Web, and then expand the Base URLs node. 

6.11 — In the Base URL text box, enter the full URL of your website, for example: https://www.example.com/.

6.12 — Expand the Base URLs (Secure) node.

6.13 — In the Secure Base URL text box, enter the full URL of your website, for example https://www.example.com/.

6.14 — Choose Yes for the Use Secure URLs on Storefront, Use Secure URLs in Admin, and Upgrade Insecure Requests options.

6.15 —Choose Save Config at the top of the page.

HTTPS is now configured for your Magento website. When customers browse to the HTTP version (e.g., http://www.example.com) of your Magento website, they will be automatically redirected to the HTTPS version (e.g., https://www.example.com). For more information about configuring HTTPS in the administration dashboard of your Magento website, see Store URLs in the Magento User Guide.