It is recommended to specify an IAM role when creating the EC2 instance. This will allow the instance to be upgraded in situ, in particular to apply EPCs and patches, without needing to create an instance from a new Marketplace AMI. This role should have at least the authority to read from S3. In order to do that you will need to launch the instance manually. The IAM role should be able to action get and list for these resources: "arn:aws:s3:::lansa" and "arn:aws:s3:::lansa/releasedbuilds/*" You will connect to your LANSA IDE using RDP. If you use the default security group suggested by Marketplace, then you will already have allowed RDP traffic from your IP address. However, we recommend you change the tcp 3389 that is by default open to the world to My IP to make it more secure. Then you will just need to obtain the password from the running instance by clicking Get Password. Then you click on Download Remote Desktop File. When you run the RDP file, enter a user id of Administrator and the password you obtained from the instance. Follow the instructions displayed when you first login. Note that it may take up to a minute from accessing the instance for the Start Here instructions to be displayed. For a more detailed description of how to access the instance using RDP and security issues you should be aware of, see this link: http://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/connecting_to_windows_instance.html