--- schema_version: "1" id: 13da239a9f8174e03db97c10da095c0ff70154202a8b3e499e7c6a80a9c4bc5e title: Self-Deploy a Single Tableau Server on AWS collection: tableau version: current locale: en-us portal_url: https://docs.salesforce.com/tableau/current/en-us/server/ts_aws_single_server.md canonical_url: https://help.tableau.com/current/server/en-us/ts_aws_single_server.htm source_site: help.tableau.com content_type: documentation content_hash: 527571ef894894197684fe1824c3a87d1df3bfe7eb17ba3dd2375a16bc6c7fd0 description: Deployments on public clouds continue to be supported but the content for third-party public cloud deployments is no longer updated --- [Skip to main content](#main-content) # Self-Deploy a Single Tableau Server on AWS ## This is archived content Deployments on public clouds continue to be supported but the content for third-party public cloud deployments is no longer updated. For the latest Tableau Server deployment content, see the [Deploy](https://help.tableau.com/current/server/en-us/install.htm) section of Tableau Server help. For those customers who have access, we recommend Tableau Cloud. For more details, see: - [Tableau Cloud Manual Migration Guide](https://help.tableau.com/current/guides/migration/en-us/emg_intro.htm) - [Tableau Cloud Trial for Admin](https://help.tableau.com/current/server-linux/en-us/install.htm) - [Tableau Cloud: Get Started for Admin](https://www.tableau.com/learn/get-started/online-admin) ## Introduction For the most flexibility in security, scaling, and capacity, you can perform a self-deployment of Tableau Server on AWS. Building a cloud-based solution has many benefits over an on-premises installation. For example, the overall total cost of ownership for building a Tableau Server solution in the cloud is normally much less than a similar on-premises solution because you don’t have to buy all of the expensive hardware. In addition, the cloud can provide better uptime, reliability, and fault-tolerance, especially if you deploy your solution across different regions and Availability Zones. When you deploy Tableau Server in a cluster in AWS, we recommend that you use Amazon Elastic Block Store (EBS) volumes with Amazon EC2. EBS provides persistent block-level storage volumes for use with Amazon EC2 instances. You should attach a separate EBS General Purpose (SSD) volume with a volume size of at least 100 GiB to allow room for installing Tableau Server. This volume size supports a baseline performance of 300 input/output operations per second (IOPS) with the ability to burst to 3,000 IOPS. For more information, see [General Purpose SSD (gp2) Volumes](http://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/EBSVolumeTypes.html#EBSVolumeTypes_gp2) in the _Amazon EC2 User Guide for Windows Instances_ at the AWS website. For heavy workloads where the storage subsystem must provide an absolute minimum number of IOPS for performance, you can either create a larger EBS General Purpose (SSD) volume to get up to 10,000 IOPS with the ratio of 3 IOPS per GiB, or use an EBS Provisioned IOPS (SSD) volume with the IOPS you need. In either case, we recommend that you use EBS-optimized instances if you plan to run heavy extracts and do a lot of data processing. For more information about Tableau Server performance, see [Tableau Server Performance Overview](https://help.tableau.com/current/server/en-us/perf.htm). Perform the following tasks to install and configure Tableau Server in the AWS cloud. ## Step 1: Create a Virtual Private Cloud (VPC) Your first step is to create a Virtual Private Cloud (VPC) and add an [Amazon elastic network interface](https://docs.aws.amazon.com/vpc/latest/userguide/VPC_ElasticNetworkInterfaces.html) to provide a static MAC address for your Amazon EC2 instance. 1. Sign in to AWS and then navigate to the [Amazon VPC console](https://console.aws.amazon.com/vpc/) (https://console.aws.amazon.com/vpc/) 2. Use the region selector to choose the location where your other AWS resources are located. Often, this is the region closest to you. 3. Under **Resources**, click **Start VPC Wizard**, on the **Step 1: Select a VPC Configuration** screen, click **VPC with a Single Public Subnet**, and then click **Select**. 4. On the **Step 2: VPC with a Single Public Subnet** screen, give your VPC a name, and then click **Create VPC**. You can leave all other settings at their default values. ## Step 2: Configure networking and security To allow inbound traffic to reach your VPC, you should limit traffic to three standard ports (HTTP, HTTPS, and RDP). For more information, see Recommended Network ACL Rules for your VPC in the Amazon Virtual Private Cloud User Guide at the AWS website. 1. Navigate to the [Amazon EC2 console](https://console.aws.amazon.com/ec2/) (https://console.aws.amazon.com/ec2/). 2. Use the region selector to choose the location where you created your VPC. 3. In the navigation pane, click **Security Groups**, and then click **Create Security Group**. 4. On the **Create Security Group** screen, in the **Security group name** field, enter a name for your security group. 5. In the **Description** field, enter a description for the security group. 6. In the **VPC** field, select your VPC from the list. 7. Click the **Inbound** tab, click **Add Rule**, and then in the **Type** list, select **HTTP (80)**, and in the **Source** column, choose **My IP** for each rule. This limits inbound traffic to your computer. To specify an IP address range instead, choose **Custom**, and then enter the range in CIDR notation. For more information, see [Adding Rules to a Security Group](http://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/using-network-security.html#adding-security-group-rule) in the _Amazon EC2 User Guide for Windows_ Instances at the AWS website. **Note:** This port is required to receive incoming unencrypted web traffic. 8. Click **Add Rule**, in the **Type** list, select **HTTPS (443)**, and in the **Source** column, choose **My IP** for each rule. This limits inbound traffic to your computer. To specify an IP address range instead, choose **Custom**, and then enter the range in CIDR notation. For more information, see [Adding Rules to a Security Group](http://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/using-network-security.html#adding-security-group-rule) in the _Amazon EC2 User Guide for Windows Instances_ at the AWS website. **Note:** This port is required to receive incoming encrypted web traffic. 9. Click **Add Rule**, in the **Type** list, select **RDP (3389)**, and in the **Source** column, choose **My IP** for each rule. This limits inbound traffic to your computer. To specify an IP address range instead, choose **Custom**, and then enter the range in CIDR notation. For more information, see [Adding Rules to a Security Group](http://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/using-network-security.html#adding-security-group-rule) in the _Amazon EC2 User Guide for Windows Instances_ at the AWS website. **Note:** This port is required to accept Remote Desktop Protocol (RDP) requests so that you can connect to the EC2 instance. 10. Click **Create**. ## Step 3: Launch an Amazon EC2 instance After you create your VPC, you can launch an Amazon EC2 instance into it. For more information about how to launch and connect to a Windows instance, see [Getting Started with Amazon EC2 Windows Instances](http://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/EC2Win_GetStarted.html) in the _Amazon EC2 User Guide for Windows Instances_ at the AWS website. 1. Navigate to the [Amazon EC2 console](https://console.aws.amazon.com/ec2/) (https://console.aws.amazon.com/ec2/). 2. Use the region selector to choose the location where you created your VPC. 3. Under **Create Instance**, click **Launch Instance**. 4. Select an Amazon Machine Image (AMI) that meets the [system requirements](https://help.tableau.com/current/server/en-us/ts_aws_virtual_machine_selection.htm) for Tableau Server. 5. On the **Step 2: Choose Instance Type** screen, select the instance size you want (for example, m4.2xlarge). **Note:** For Tableau Server v10 on a 64-bit virtual machine, you need a minimum of 4 physical cores. On AWS, this means 8 vCPUs. For more information, see [Amazon EC2 Instance Types](https://aws.amazon.com/ec2/instance-types/) at the AWS website. 6. Click **Next: Configure Instance Details**. 7. On the **Step 3: Configure Instance Details** screen, in the **Network** list, select your VPC. 8. Click through the steps in the wizard until you get to **Step 6: Configure Security Group**. 9. On the **Step 6: Configure Security Group** screen, click **Select an existing security group**, and then select the security group that you created earlier. 10. Click **Review and Launch**, review your configuration, and then click **Launch**. 11. When you are prompted, create a new key pair, download it as a .pem file, and keep it in a safe place. You need the key pair in order to create a password that you can use to log into the Amazon EC2 instance. 12. When you have finished creating and downloading your key pair, click **Launch Instances**. 13. Click **View Instances** and locate your instance in the list. 14. Copy the instance ID. You’ll need this in the next step. ## Step 4: Create an elastic IP address for the VPC After you launch your Amazon EC2 instance, you can create and allocate a static public IP address to your VPC. 1. Navigate to the [Amazon VPC console](https://console.aws.amazon.com/vpc/) (https://console.aws.amazon.com/vpc/). 2. Use the region selector to choose the location where you created your VPC. 3. In the navigation pane, click **Elastic IPs**. 4. Click **Allocate new address**, and then click **Allocate**. 5. In the **New address request succeeded** dialog box, click the Elastic IP address. 6. On the **Action** menu, click **Associate address**. 7. In **Resource type**, select **Instance**. 8. In the **Instance** drop-down list box, select your instance, and then click **Associate**. 9. Copy the new private IP address. You’ll need this later. ## Step 5: Log in to Amazon EC2 To run Tableau Server on AWS, you install it on the Amazon EC2 instance or instances that you just configured. To begin, you log into the Amazon EC2 instance where you want to install Tableau Server. Use Remote Desktop Protocol (RDP) from a computer running Microsoft Windows to connect to your Amazon EC2 instance running Microsoft Windows. If you're connecting from a computer running Linux, you can use [rdesktop](http://www.rdesktop.org/) to connect to your Amazon EC2 instance running Microsoft Windows. For more information, see [Connecting to Your Windows Instance](http://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/connecting_to_windows_instance.html) in the _Amazon EC2 User Guide for Windows Instances_ at the AWS website. 1. Navigate to the [Amazon EC2 console](https://console.aws.amazon.com/ec2/) (https://console.aws.amazon.com/ec2/). 2. Use the region selector to choose the location where you launched your instance. 3. In the EC2 Dashboard, click **Instances**. 4. Select the check box next to your instance, and then on the **Actions** menu, click **Connect**. 5. In the **Connect To Your Instance** dialog box, click **Download Remote Desktop File** to create an .rdp file that's configured to connect to the instance. The .rdp file is configured to connect to the public IP address of your VPC, which you specified in the Elastic IP address that you created. 6. Click **Get Password**, and then select the .pem file for the key pair you created earlier. This fills in the private key from your key pair. 7. Click **Decrypt Password**. When the password is displayed, make a note of the Public DNS address, user name (such as Administrator), and password. 8. Double-click the .rdp file that you downloaded earlier. 9. Click **Connect**. (You can ignore any messages that indicate that the publisher is unknown.) 10. Enter the user name and password that you recorded a few steps ago, and then click **OK**. 11. You can safely ignore any warnings that the publisher of the remote connection is unknown. Click **Yes** to connect. ## Step 6: Install Tableau Server Now that you’re logged in to your EC2 instance, you can install Tableau Server. The installation steps on an EC2 instance are the same as they are for any other computer. For instructions, see [Install and Configure](https://help.tableau.com/current/server/en-us/install.htm). After you install Tableau Server and create a Tableau Server administrator account and sign in, you can [add users](https://help.tableau.com/current/server/en-us/users_add.htm). If you want to run a Tableau Server cluster, install additional Tableau Servers on additional Amazon EC2 instances. For more information, see [Self-Deploy Tableau Server on AWS in a Distributed Environment](https://help.tableau.com/current/server/en-us/ts_aws_multiple_server.htm).