User Guide

Launch a Client

To interact with and manage your AWS CloudHSM cluster and HSM instances, you must be able to communicate with the elastic network interfaces (ENIs) of your HSMs. The easiest way to do this is to use an Amazon EC2 instance in the same Amazon VPC as your cluster (see below). You can also use the following AWS resources to connect to your cluster.

Launch an EC2 Client

The AWS CloudHSM documentation typically assumes that you are using an Amazon EC2 instance in the same Amazon Virtual Private Cloud (VPC) and Availability Zone (AZ) in which you create your cluster.

To create an Amazon EC2 client instance

  1. Open the EC2 console at

  2. Choose Launch instance on the EC2 Dashboard.

  3. Select an Amazon machine image (AMI).

  4. Choose an instance type and then choose Next: Configure Instance Details.

  5. For Network, choose the VPC you previously created for your cluster.

  6. For Subnet, choose the public subnet that you created for the VPC.

  7. For Auto-assign Public IP, choose Enable.

  8. Choose Next: Add Storage and configure your storage.

  9. Choose Next: Add Tags and add any name–value pairs that you want to associate with the instance.

  10. Choose Next: Configure Security Group.

  11. Choose Select an existing security group and select the default security group that was created when your cluster was created.

  12. Choose Review and Launch.

For more information about creating an Amazon EC2 client if you don't already have one, see Getting Started with Amazon EC2 Linux Instances. For information about connecting to a running client, see the following topics:

Note that you can use your Amazon EC2 instance to run all of the AWS CLI commands contained in this guide. You can also install the AWS CloudHSM client software on your instance. For more information, see Install the CloudHSM Client.

On this page: