hands-on lab

Connecting to Private EC2 Instances Using an Amazon EC2 Instance Connect Endpoint

Up to 1h
Get guided in a real environmentPractice with a step-by-step scenario in a real, provisioned environment.
Learn and validateUse validations to check your solutions every step of the way.
See resultsTrack your knowledge and monitor your progress.


Amazon EC2 Instance Connect (EIC) Endpoints provide a secure and seamless option for connecting to private EC2 instances. EIC endpoints can be configured using identity-based and network-based access controls, which provides more flexibility and control over the security of your VPC resources. These endpoints can also reduce administrative overhead and improve security by removing the need for a bastion host.

In this lab, you will replace a bastion host with an Amazon EC2 Instance Connect Endpoint to access a private EC2 instance. You will connect to the private instance using the AWS Management Console and the AWS CLI.

Learning objectives

Upon completion of this intermediate-level lab, you will be able to:

  • Configure an Amazon EC2 Instance Connect Endpoint
  • Access a private instance using an EC2 Instance Connect Endpoint

Intended audience

  • Cloud Architects
  • DevOps Engineers
  • Software Engineers


Familiarity with the following will be beneficial but is not required:

  • Amazon Virtual Private Cloud (VPC)
  • Amazon Elastic Compute Cloud (EC2)

The following content can be used to fulfill the prerequisites:

Environment before

Environment after

About the author

Jun Fritz, opens in a new tab
Cloud Labs Developer
Learning paths

Jun is a Cloud Labs Developer with previous experience as a Software Engineer and Cloud Developer. He holds the AWS Certified Solutions Architect and DevOps Engineer Professional certifications. He also holds the AWS Certified Solutions Architect, Developer, and SysOps Administrator Associate certifications. 

Jun is focused on giving back to the growing cloud community by sharing his knowledge and experience with students and creating engaging content. 

Covered topics

Lab steps

Logging In to the Amazon Web Services Console
Introducing Amazon EC2 Instance Connect Endpoints
Connecting to the Virtual Machine using EC2 Instance Connect
Accessing Private Instances Using a Bastion Host
Creating an Amazon EC2 Instance Connect Endpoint
Connecting to an Amazon EC2 Instance Connect Endpoint