

# AWS Windows AMI reference
<a name="windows-amis"></a>

AWS provides a set of publicly available Amazon Machine Images (AMIs) that contain software configurations specific to the Windows platform. 

You can quickly start building and deploying your applications with Amazon EC2 by using these AMIs. First choose the AMI that meets your specific requirements, and then launch an instance using that AMI. You retrieve the password for the administrator account and then log in to the instance using Remote Desktop Connection, just as you would with any other Windows Server.

In general, the AWS Windows AMIs are configured with the default settings used by the Microsoft installation media. However, Amazon does apply some customizations. For example, the AWS Windows AMIs come with the following software and drivers:
+ EC2Launch v2 (Windows Server 2022 and 2025)
+ EC2Launch v1 (Windows Server 2016 and 2019)
+ EC2Config (through Windows Server 2012 R2)
+ AWS Systems Manager
+ AWS CloudFormation
+ AWS Tools for Windows PowerShell
+ Network drivers (SRIOV, ENA, Citrix PV)
+ Storage drivers (NVMe, AWS PV, Citrix PV)
+ Graphics drivers (NVidia GPU, Elastic GPU)

With the Windows fast launch feature, you can configure pre-provisioned snapshots to launch instances up to 65% faster. For more information, see [Configure Windows fast launch for your Windows Server AMI](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/win-ami-config-fast-launch.html) in the *Amazon EC2 User Guide*.

To view changes to each release of the AWS Windows AMIs, including SQL Server updates, see the [AWS Windows AMI version history](ec2-windows-ami-version-history.md).

# Specialized AWS Windows AMIs
<a name="specialized-windows-amis"></a>

In addition to its standard operating system version AMIs, Amazon creates the following types of specialized AWS Windows AMIs:

**SQL Server license-included AMIs**  
Launching an instance from a Windows AMI with Microsoft SQL Server enables you to run the instance as a database server. For more information, see [AWS Windows Server license-included SQL Server AMIs](ami-windows-sql.md).

**STIG Hardened AMIs**  
STIG Hardened EC2 Windows Server AMIs are pre-configured with over 160 required security settings to help ensure that the instances that you launch follow the latest guidelines for STIG compliance. For more information, see [STIG Hardened AWS Windows Server AMIs](ami-windows-stig.md).

**NitroTPM enabled AMIs**  
Amazon creates a set of AMIs that are pre-configured with NitroTPM and UEFI Secure Boot requirements. For more information, see [AWS Windows Server NitroTPM enabled AMIs](ami-windows-tpm.md).

You can also create your own customized AMI from one of the AWS Windows AMIs with EC2 Image Builder. For more information, see the [EC2 Image Builder User Guide](https://docs.aws.amazon.com/imagebuilder/latest/userguide/).

We recommend PowerShell for the command line examples in this section. To install PowerShell in your environment, see the [Installation](https://docs.aws.amazon.com/powershell/v4/userguide/pstools-getting-set-up.html) page in the *AWS Tools for PowerShell (version 4) User Guide*.

**Note**  
Not all AMIs are available in all Regions.

## Find an AWS Windows AMI
<a name="find-windows-amis"></a>

Each of the specialized AMI pages linked above has its own filtered search examples, as follows:
+ [Find Windows Server AMIs with Microsoft SQL Server](ami-windows-sql.md#ami-windows-sql-find)
+ [Find a STIG Hardened AMI](ami-windows-stig.md#find-windows-stig-ami)
+ [Find Windows Server AMIs configured with NitroTPM and UEFI Secure Boot](ami-windows-tpm.md#ami-windows-tpm-find)

You can also search for the latest Windows AMIs that include the EC2Launch v2 agent, as shown in the following PowerShell example:

```
Get-SSMLatestEC2Image `
    -Path ami-windows-latest `
    -ImageName EC2LaunchV2-Windows* | `
Sort-Object Name
```

**Note**  
If this command doesn't run in your environment, you might be missing a PowerShell module. For more information about this command, see [Get-SSMLatestEC2Image Cmdlet](https://docs.aws.amazon.com/powershell/v4/reference/items/Get-SSMLatestEC2Image.html).  
Alternatively, you can use the [CloudShell console](https://console.aws.amazon.com/cloudshell/home) and run `pwsh` to bring up a PowerShell prompt that already has all of the AWS tools installed. For more information, see the [AWS CloudShell User Guide](https://docs.aws.amazon.com/cloudshell/latest/userguide/welcome.html).

### Find an AWS Windows AMI in a specific language
<a name="find-language-specific-windows-amis"></a>

The following language-specific AWS Windows AMIs are included in the monthly release:
+ English
+ Japanese
+ Chinese
+ Korean
+ Czech
+ Dutch
+ French
+ German
+ Hungarian
+ Italian
+ Polish
+ Russian
+ Portuguese
+ Spanish
+ Swedish
+ Turkish

The following example uses PowerShell to search for the latest English language AWS Windows AMIs:

```
Get-SSMLatestEC2Image `
    -Path ami-windows-latest `
    -ImageName *Windows_Server-*English* | `
Sort-Object Name
```

**Note**  
If this command doesn't run in your environment, you might be missing a PowerShell module. For more information about this command, see [Get-SSMLatestEC2Image Cmdlet](https://docs.aws.amazon.com/powershell/v4/reference/items/Get-SSMLatestEC2Image.html).  
Alternatively, you can use the [CloudShell console](https://console.aws.amazon.com/cloudshell/home) and run `pwsh` to bring up a PowerShell prompt that already has all of the AWS tools installed. For more information, see the [AWS CloudShell User Guide](https://docs.aws.amazon.com/cloudshell/latest/userguide/welcome.html).

# AWS Windows Server license-included SQL Server AMIs
<a name="ami-windows-sql"></a>

AWS Windows AMIs with Microsoft SQL Server include one of the following SQL Server editions. Launching an instance from a Windows AMI with Microsoft SQL Server enables you to run the instance as a database server.
+ SQL Enterprise Edition
+ SQL Server Standard
+ SQL Server Express
+ SQL Server Web

For more information about running Microsoft SQL Server on EC2, see the [Microsoft SQL Server on Amazon EC2 User Guide](https://docs.aws.amazon.com/sql-server-ec2/latest/userguide/sql-server-on-ec2-overview.html).

Each AWS Windows AMIs with Microsoft SQL Server AMI also includes the following features:
+ Automatic Windows and SQL Server updates
+ SQL Server Management Studio included
+ Preconfigured SQL Server service accounts

## Find Windows Server AMIs with Microsoft SQL Server
<a name="ami-windows-sql-find"></a>

AWS managed AMIs always include the AMI creation date as part of the name. The best way to ensure that your search returns the AMIs that you're looking for is to add date filtering for the name. Use one of the following command line options to find an AMI.

------
#### [ AWS CLI ]

**Find the latest SQL AMIs**  
The following example retrieves a list of the latest Windows Server AMIs that include Microsoft SQL Server.

```
aws ssm get-parameters-by-path \
    --path "/aws/service/ami-windows-latest" \
    --recursive \
    --query 'Parameters[*].{Name:Name,Value:Value}' \
    --output text | grep ".*Windows_Server-.*SQL.*" | sort
```

**Find a specific AMI**  
The following example retrieves Windows Server AMIs with Microsoft SQL Server by filtering on the AMI name, the owner, the platform, and the creation date (year and month). Output is formatted as a table with columns for the AMI name and image ID.

```
aws ec2 describe-images \
    --owners amazon \
    --filters \
        "Name=name,Values=*SQL*" \
        "Name=platform,Values=windows" \
        "Name=creation-date,Values=2025-05*" \
    --query 'Images[].[Name,ImageId]' \
    --output text | sort
```

------
#### [ PowerShell (recommended) ]

**Find the latest SQL AMIs**  
The following example retrieves a list of the latest Windows Server AMIs that include Microsoft SQL Server.

```
Get-SSMLatestEC2Image `
    -Path ami-windows-latest `
    -ImageName *Windows_Server-*SQL* |
Sort-Object Name
```

**Note**  
If this command doesn't run in your environment, you might be missing a PowerShell module. For more information about this command, see [Get-SSMLatestEC2Image Cmdlet](https://docs.aws.amazon.com/powershell/v4/reference/items/Get-SSMLatestEC2Image.html).  
Alternatively, you can use the [CloudShell console](https://console.aws.amazon.com/cloudshell/home) and run `pwsh` to bring up a PowerShell prompt that already has all of the AWS tools installed. For more information, see the [AWS CloudShell User Guide](https://docs.aws.amazon.com/cloudshell/latest/userguide/welcome.html).

**Find a specific AMI**  
The following example retrieves Windows Server AMIs with Microsoft SQL Server by filtering on the AMI name, the owner, the platform, and the creation date (year and month). Output is formatted as a table with columns for the AMI name and image ID.

```
Get-EC2Image `
    -Owner amazon `
    -Filter @(
        @{Name = "name"; Values = @("*SQL*")}
        @{Name = "platform"; Values = @("windows")}
        @{Name = "creation-date"; Values = @("2025-*")}
    ) |
Sort-Object Name |
Format-Table Name, ImageID -AutoSize
```

------

# STIG Hardened AWS Windows Server AMIs
<a name="ami-windows-stig"></a>

Security Technical Implementation Guides (STIGs) are the configuration standards created by the Defense Information Systems Agency (DISA) to secure information systems and software. DISA documents three levels of compliance risk, known as categories:
+ **Category I** — The highest level of risk. It covers the most severe risks, and includes any vulnerability that can result in a loss of confidentiality, availability, or integrity.
+ **Category II** — Medium risk.
+ **Category III** — Low risk.

Each compliance level includes all STIG settings from lower levels. This means that the highest level includes all applicable settings from all levels.

To ensure that your systems are compliant with STIG standards, you must install, configure, and test a variety of security settings. STIG Hardened EC2 Windows Server AMIs are pre-configured with over 160 required security settings. Amazon EC2 supports the following operating systems for STIG Hardened AMIs:
+ Windows Server 2022
+ Windows Server 2019
+ Windows Server 2016
+ Windows Server 2012 R2

The STIG Hardened AMIs include updated Department of Defense (DoD) certificates to help you get started and achieve STIG compliance. STIG Hardened AMIs are available in all commercial AWS and GovCloud (US) Regions. You can launch instances from these AMIs directly from the Amazon EC2 console. They are billed using standard Windowspricing. There are no additional charges for using STIG Hardened AMIs.

The following sections list the STIG settings that Amazon applies to WindowsOperating Systems and components.

**Topics**
+ [Find a STIG Hardened AMI](#find-windows-stig-ami)
+ [Core and base operating systems](#base-os-stig)
+ [Microsoft .NET Framework 4.0 STIG Version 2 Release 6](#dotnet-os-stig)
+ [WindowsFirewall STIG Version 2 Release 2](#windows-firewall-stig)
+ [Internet Explorer (IE) 11 STIG Version 2 Release 5](#ie-os-stig)
+ [Microsoft Edge STIG Version 2 Release 2](#edge-stig)
+ [Microsoft Defender STIG Version 2 Release 4](#defender-stig)
+ [Version history](#stig-version-history)

## Find a STIG Hardened AMI
<a name="find-windows-stig-ami"></a>

You can search for a STIG Hardened EC2 Windows Server AMI when you launch an instance from the EC2 console, or you can search for an AMI in the CLI or in PowerShell, as follows.

**Name patterns for STIG Hardened Windows AMIs**
+ Windows\$1Server-2022-English-STIG-Full-*YYYY.MM.DD*
+ Windows\$1Server-2022-English-STIG-Core-*YYYY.MM.DD*
+ Windows\$1Server-2019-English-STIG-Full-*YYYY.MM.DD*
+ Windows\$1Server-2019-English-STIG-Core-*YYYY.MM.DD*
+ Windows\$1Server-2016-English-STIG-Full-*YYYY.MM.DD*
+ Windows\$1Server-2016-English-STIG-Core-*YYYY.MM.DD*
+ Windows\$1Server-2012-R2-English-STIG-Full-*YYYY.MM.DD*
+ Windows\$1Server-2012-R2-English-STIG-Core-*YYYY.MM.DD*

------
#### [ Console ]

You can select an AMI from the **Community AMIs** tab when you launch an instance, as follows.

**Launch an EC2 instance with a STIG Hardened Windows Server AMI**

1. Open the Amazon EC2 console at [https://console.aws.amazon.com/ec2/](https://console.aws.amazon.com/ec2/).

1. Choose **Instances** from the navigation pane. This opens a list of your EC2 instances in the current AWS Region.

1. Choose **Launch instances** from the upper right corner above the list. This opens the **Launch an instance** page.

1. To find a STIG Hardened AMI, choose **Browse more AMIs** on the right side of the **Application and OS Images (Amazon Machine Image)** section. This displays an advanced AMI search.

1. Select the **Community AMIs** tab, and enter part or all of one of the following name patterns in the search bar. Our AMIs indicate that they are "provided by Amazon."
**Note**  
The date suffix for the AMI (*YYYY.MM.DD*) is the date when the latest version was created. You can search for the version without the date suffix.

------
#### [ AWS CLI ]

**Find the latest STIG AMIs**  
The following example retrieves a list of the latest STIG Hardened Windows Server AMIs.

```
aws ssm get-parameters-by-path \
    --path "/aws/service/ami-windows-latest" \
    --recursive \
    --query 'Parameters[*].{Name:Name,Value:Value}' \
    --output text | grep "Windows_Server-.*STIG" | sort
```

**Find a specific AMI**  
The following example retrieves STIG Hardened Windows Server AMIs by filtering on the AMI name, the owner, the platform, and the creation date (year and month). Output is formatted as a table with columns for the AMI name and image ID.

```
aws ec2 describe-images \
    --owners amazon \
    --filters \
        "Name=name,Values=*STIG*" \
        "Name=platform,Values=windows" \
        "Name=creation-date,Values=2025-05*" \
    --query 'Images[].[Name,ImageId]' \
    --output text | sort
```

------
#### [ PowerShell ]

**Find the latest STIG AMIs**  
The following example retrieves a list of the latest STIG Hardened Windows Server AMIs.

```
Get-SSMLatestEC2Image `
    -Path ami-windows-latest `
    -ImageName *Windows_Server-*STIG* |
Sort-Object Name
```

**Note**  
If this command doesn't run in your environment, you might be missing a PowerShell module. For more information about this command, see [Get-SSMLatestEC2Image Cmdlet](https://docs.aws.amazon.com/powershell/v4/reference/items/Get-SSMLatestEC2Image.html).  
Alternatively, you can use the [CloudShell console](https://console.aws.amazon.com/cloudshell/home) and run `pwsh` to bring up a PowerShell prompt that already has all of the AWS tools installed. For more information, see the [AWS CloudShell User Guide](https://docs.aws.amazon.com/cloudshell/latest/userguide/welcome.html).

**Find a specific AMI**  


The following example retrieves STIG Hardened Windows Server AMIs by filtering on the AMI name, the owner, the platform, and the creation date (year and month). Output is formatted as a table with columns for the AMI name and image ID.

```
Get-EC2Image `
    -Owner amazon `
    -Filter @(
        @{Name = "name"; Values = @("*STIG*")}
        @{Name = "platform"; Values = @("amazon")}
        @{Name = "creation-date"; Values = @("2025*")}
    ) |
Sort-Object Name |
Format-Table Name, ImageID -AutoSize
```

------

## Core and base operating systems
<a name="base-os-stig"></a>

STIG Hardened EC2 AMIs are designed for use as standalone servers, and have the highest level of STIG settings applied.

The following list contains STIG settings that apply for STIG Hardened Windows AMIs. Not all settings apply in all cases. For example, some STIG settings might not apply to standalone servers. Organization-specific policies can also affect which settings apply, such as a requirement for administrators to review document settings.

For a complete list of Windows STIGs, see the [STIGs Document Library](https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=windows). For information about how to view the complete list, see [STIG Viewing Tools](https://public.cyber.mil/stigs/srg-stig-tools/).

### Windows Server 2022 STIG Version 2 Release 4
<a name="win-server-2022"></a>

This release includes the following STIG settings for Windows operating systems:

V-254335, V-254336, V-254337, V-254338, V-254351, V-254357, V-254363, V-254481, V-254247, V-254265, V-254269, V-254270, V-254271, V-254272, V-254273, V-254274, V-254276, V-254277, V-254278, V-254285, V-254286, V-254287, V-254288, V-254289, V-254290, V-254291, V-254292, V-254300, V-254301, V-254302, V-254303, V-254304, V-254305, V-254306, V-254307, V-254308, V-254309, V-254310, V-254311, V-254312, V-254313, V-254314, V-254315, V-254316, V-254317, V-254318, V-254319, V-254320, V-254321, V-254322, V-254323, V-254324, V-254325, V-254326, V-254327, V-254328, V-254329, V-254330, V-254331, V-254332, V-254333, V-254334, V-254339, V-254341, V-254342, V-254344, V-254345, V-254346, V-254347, V-254348, V-254349, V-254350, V-254355, V-254356, V-254356, V-254358, V-254359, V-254360, V-254361, V-254362, V-254364, V-254365, V-254366, V-254367, V-254368, V-254369, V-254370, V-254371, V-254372, V-254373, V-254375, V-254376, V-254377, V-254379, V-254380, V-254382, V-254383, V-254384, V-254431, V-254432, V-254433, V-254434, V-254435, V-254436, V-254438, V-254439, V-254442, V-254443, V-254444, V-254445, V-254449, V-254450, V-254451, V-254452, V-254453, V-254454, V-254455, V-254456, V-254459, V-254460, V-254461, V-254462, V-254463, V-254464, V-254468, V-254470, V-254471, V-254472, V-254473, V-254476, V-254477, V-254478, V-254479, V-254480, V-254482, V-254483, V-254484, V-254485, V-254486, V-254487, V-254488, V-254489, V-254490, V-254493, V-254494, V-254495, V-254497, V-254499, V-254501, V-254502, V-254503, V-254504, V-254505, V-254507, V-254508, V-254509, V-254510, V-254511, V-254512, V-254293, V-254352, V-254353, V-254354, V-254374, V-254378, V-254381, V-254446, V-254465, V-254466, V-254467, V-254469, V-254474, V-254475, and V-254500

### Windows Server 2019 STIG Version 3 Release 4
<a name="win-server-2019"></a>

This release includes the following STIG settings for Windows operating systems:

V-205691, V-205819, V-205858, V-205859, V-205860, V-205870, V-205871, V-205923, V-205625, V-205626, V-205627, V-205629, V-205630, V-205633, V-205634, V-205635, V-205636, V-205637, V-205638, V-205639, V-205643, V-205644, V-205648, V-205649, V-205650, V-205651, V-205652, V-205655, V-205656, V-205659, V-205660, V-205662, V-205671, V-205672, V-205673, V-205675, V-205676, V-205678, V-205679, V-205680, V-205681, V-205682, V-205683, V-205684, V-205685, V-205686, V-205687, V-205688, V-205689, V-205690, V-205692, V-205693, V-205694, V-205697, V-205698, V-205708, V-205709, V-205712, V-205714, V-205716, V-205717, V-205718, V-205719, V-205720, V-205722, V-205729, V-205730, V-205733, V-205747, V-205751, V-205752, V-205754, V-205756, V-205758, V-205759, V-205760, V-205761, V-205762, V-205764, V-205765, V-205766, V-205767, V-205768, V-205769, V-205770, V-205771, V-205772, V-205773, V-205774, V-205775, V-205776, V-205777, V-205778, V-205779, V-205780, V-205781, V-205782, V-205783, V-205784, V-205795, V-205796, V-205797, V-205798, V-205801, V-205808, V-205809, V-205810, V-205811, V-205812, V-205813, V-205814, V-205815, V-205816, V-205817, V-205821, V-205822, V-205823, V-205824, V-205825, V-205826, V-205827, V-205828, V-205830, V-205832, V-205833, V-205834, V-205835, V-205836, V-205837, V-205838, V-205839, V-205840, V-205841, V-205842, V-205861, V-205863, V-205865, V-205866, V-205867, V-205868, V-205869, V-205872, V-205873, V-205874, V-205911, V-205912, V-205915, V-205916, V-205917, V-205918, V-205920, V-205921, V-205922, V-205924, V-205925, V-236001, V-257503, V-205653, V-205654, V-205711, V-205713, V-205724, V-205725, V-205757, V-205802, V-205804, V-205805, V-205806, V-205849, V-205908, V-205913, V-205914, and V-205919

### Windows Server 2016 STIG Version 2 Release 10
<a name="win-server-2016"></a>

This release includes the following STIG settings for Windows operating systems:

V-224916, V-224917, V-224918, V-224919, V-224931, V-224942, V-225060, V-224850, V-224852, V-224853, V-224854, V-224855, V-224856, V-224857, V-224858, V-224859, V-224866, V-224867, V-224868, V-224869, V-224870, V-224871, V-224872, V-224873, V-224881, V-224882, V-224883, V-224884, V-224885, V-224886, V-224887, V-224888, V-224889, V-224890, V-224891, V-224892, V-224893, V-224894, V-224895, V-224896, V-224897, V-224898, V-224899, V-224900, V-224901, V-224902, V-224903, V-224904, V-224905, V-224906, V-224907, V-224908, V-224909, V-224910, V-224911, V-224912, V-224913, V-224914, V-224915, V-224920, V-224922, V-224924, V-224925, V-224926, V-224927, V-224928, V-224929, V-224930, V-224935, V-224936, V-224937, V-224938, V-224939, V-224940, V-224941, V-224943, V-224944, V-224945, V-224946, V-224947, V-224948, V-224949, V-224951, V-224952, V-224953, V-224955, V-224956, V-224957, V-224959, V-224960, V-224962, V-224963, V-225010, V-225013, V-225014, V-225015, V-225016, V-225017, V-225018, V-225019, V-225021, V-225022, V-225023, V-225024, V-225028, V-225029, V-225030, V-225031, V-225032, V-225033, V-225034, V-225035, V-225038, V-225039, V-225040, V-225041, V-225042, V-225043, V-225047, V-225049, V-225050, V-225051, V-225052, V-225055, V-225056, V-225057, V-225058, V-225059, V-225061, V-225062, V-225063, V-225064, V-225065, V-225066, V-225067, V-225068, V-225069, V-225072, V-225073, V-225074, V-225076, V-225078, V-225080, V-225081, V-225082, V-225083, V-225084, V-225086, V-225087, V-225088, V-225089, V-225092, V-225093, V-236000, V-257502, V-224874, V-224932, V-224933, V-224934, V-224954, V-224958, V-224961, V-225025, V-225044, V-225045, V-225046, V-225048, V-225053, V-225054, and V-225079

### Windows Server 2012 R2 MS STIG Version 3 Release 5
<a name="win-server-2012-R2"></a>

This release includes the following STIG settings for Windows operating systems:

V-225250, V-225318, V-225319, V-225324, V-225327, V-225328, V-225330, V-225331, V-225332, V-225333, V-225334, V-225335, V-225336, V-225342, V-225343, V-225355, V-225357, V-225358, V-225359, V-225360, V-225362, V-225363, V-225376, V-225392, V-225394, V-225412, V-225459, V-225460, V-225462, V-225468, V-225473, V-225476, V-225479, V-225480, V-225481, V-225482, V-225483, V-225484, V-225485, V-225487, V-225488, V-225489, V-225490, V-225511, V-225514, V-225525, V-225526, V-225536, V-225537, V-225239, V-225259, V-225260, V-225261, V-225263, V-225264, V-225265, V-225266, V-225267, V-225268, V-225269, V-225270, V-225271, V-225272, V-225273, V-225275, V-225276, V-225277, V-225278, V-225279, V-225280, V-225281, V-225282, V-225283, V-225284, V-225285, V-225286, V-225287, V-225288, V-225289, V-225290, V-225291, V-225292, V-225293, V-225294, V-225295, V-225296, V-225297, V-225298, V-225299, V-225300, V-225301, V-225302, V-225303, V-225304, V-225305, V-225314, V-225315, V-225316, V-225317, V-225325, V-225326, V-225329, V-225337, V-225338, V-225339, V-225340, V-225341, V-225344, V-225345, V-225346, V-225347, V-225348, V-225349, V-225350, V-225351, V-225352, V-225353, V-225356, V-225367, V-225368, V-225369, V-225370, V-225371, V-225372, V-225373, V-225374, V-225375, V-225377, V-225378, V-225379, V-225380, V-225381, V-225382, V-225383, V-225384, V-225385, V-225386, V-225389, V-225391, V-225393, V-225395, V-225397, V-225398, V-225400, V-225401, V-225402, V-225404, V-225405, V-225406, V-225407, V-225408, V-225409, V-225410, V-225411, V-225413, V-225414, V-225415, V-225441, V-225442, V-225443, V-225448, V-225452, V-225453, V-225454, V-225455, V-225456, V-225457, V-225458, V-225461, V-225463, V-225464, V-225469, V-225470, V-225471, V-225472, V-225474, V-225475, V-225477, V-225478, V-225486, V-225494, V-225500, V-225501, V-225502, V-225503, V-225504, V-225506, V-225508, V-225509, V-225510, V-225513, V-225515, V-225516, V-225517, V-225518, V-225519, V-225520, V-225521, V-225522, V-225523, V-225524, V-225527, V-225528, V-225529, V-225530, V-225531, V-225532, V-225533, V-225534, V-225535, V-225538, V-225539, V-225540, V-225541, V-225542, V-225543, V-225544, V-225545, V-225546, V-225548, V-225549, V-225550, V-225551, V-225553, V-225554, V-225555, V-225557, V-225558, V-225559, V-225560, V-225561, V-225562, V-225563, V-225564, V-225565, V-225566, V-225567, V-225568, V-225569, V-225570, V-225571, V-225572, V-225573, V-225574, V-225274, V-225354, V-225364, V-225365, V-225366, V-225390, V-225396, V-225399, V-225444, V-225449, V-225491, V-225492, V-225493, V-225496, V-225497, V-225498, V-225505, V-225507, V-225547, V-225552, and V-225556

## Microsoft .NET Framework 4.0 STIG Version 2 Release 6
<a name="dotnet-os-stig"></a>

The following list contains STIG settings that apply to Windows operating system components for STIG Hardened EC2 AMIs. The following list contains STIG settings that apply for STIG Hardened Windows AMIs. Not all settings apply in all cases. For example, some STIG settings might not apply to standalone servers. Organization-specific policies can also affect which settings apply, such as a requirement for administrators to review document settings.

For a complete list of Windows STIGs, see the [STIGs Document Library](https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=windows). For information about how to view the complete list, see [STIG Viewing Tools](https://public.cyber.mil/stigs/srg-stig-tools/).

**.NET Framework on Windows Server 2019, 2016, and 2012 R2 MS**  
V-225238

## WindowsFirewall STIG Version 2 Release 2
<a name="windows-firewall-stig"></a>

The following list contains STIG settings that apply to Windows operating system components for STIG Hardened EC2 AMIs. The following list contains STIG settings that apply for STIG Hardened Windows AMIs. Not all settings apply in all cases. For example, some STIG settings might not apply to standalone servers. Organization-specific policies can also affect which settings apply, such as a requirement for administrators to review document settings.

For a complete list of Windows STIGs, see the [STIGs Document Library](https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=windows). For information about how to view the complete list, see [STIG Viewing Tools](https://public.cyber.mil/stigs/srg-stig-tools/).

**WindowsFirewall on Windows Server 2022, 2019, 2016, and 2012 R2 MS**  
V-241994, V-241995, V-241996, V-241999, V-242000, V-242001, V-242006, V-242007, V-242008, V-241989, V-241990, V-241991, V-241993, V-241998, V-242003, V-241992, V-241997, and V-242002

## Internet Explorer (IE) 11 STIG Version 2 Release 5
<a name="ie-os-stig"></a>

The following list contains STIG settings that apply to Windows operating system components for STIG Hardened EC2 AMIs. The following list contains STIG settings that apply for STIG Hardened Windows AMIs. Not all settings apply in all cases. For example, some STIG settings might not apply to standalone servers. Organization-specific policies can also affect which settings apply, such as a requirement for administrators to review document settings.

For a complete list of Windows STIGs, see the [STIGs Document Library](https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=windows). For information about how to view the complete list, see [STIG Viewing Tools](https://public.cyber.mil/stigs/srg-stig-tools/).

**IE 11 on Windows Server 2022, 2019, 2016, and 2012 R2 MS**  
V-223016, V-223056, V-223078, V-223015, V-223017, V-223018, V-223019, V-223020, V-223021, V-223022, V-223023, V-223024, V-223025, V-223026, V-223027, V-223028, V-223029, V-223030, V-223031, V-223032, V-223033, V-223034, V-223035, V-223036, V-223037, V-223038, V-223039, V-223040, V-223041, V-223042, V-223043, V-223044, V-223045, V-223046, V-223048, V-223049, V-223050, V-223051, V-223052, V-223053, V-223054, V-223055, V-223057, V-223058, V-223059, V-223060, V-223061, V-223062, V-223063, V-223064, V-223065, V-223066, V-223067, V-223068, V-223069, V-223070, V-223071, V-223072, V-223073, V-223074, V-223075, V-223076, V-223077, V-223079, V-223080, V-223081, V-223082, V-223083, V-223084, V-223085, V-223086, V-223087, V-223088, V-223089, V-223090, V-223091, V-223092, V-223093, V-223094, V-223095, V-223096, V-223097, V-223098, V-223099, V-223100, V-223101, V-223102, V-223103, V-223104, V-223105, V-223106, V-223107, V-223108, V-223109, V-223110, V-223111, V-223112, V-223113, V-223114, V-223115, V-223116, V-223117, V-223118, V-223119, V-223120, V-223121, V-223122, V-223123, V-223124, V-223125, V-223126, V-223127, V-223128, V-223129, V-223130, V-223131, V-223132, V-223133, V-223134, V-223135, V-223136, V-223137, V-223138, V-223139, V-223140, V-223141, V-223142, V-223143, V-223144, V-223145, V-223146, V-223147, V-223148, V-223149, V-250540, V-250541, and V-252910

## Microsoft Edge STIG Version 2 Release 2
<a name="edge-stig"></a>

The following list contains STIG settings that apply to Windows operating system components for STIG Hardened EC2 AMIs. The following list contains STIG settings that apply for STIG Hardened Windows AMIs. Not all settings apply in all cases. For example, some STIG settings might not apply to standalone servers. Organization-specific policies can also affect which settings apply, such as a requirement for administrators to review document settings.

For a complete list of Windows STIGs, see the [STIGs Document Library](https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=windows). For information about how to view the complete list, see [STIG Viewing Tools](https://public.cyber.mil/stigs/srg-stig-tools/).

**Microsoft Edge on Windows Server 2022**  
V-235727, V-235731, V-235751, V-235752, V-235765, V-235720, V-235721, V-235723, V-235724, V-235725, V-235726, V-235728, V-235729, V-235730, V-235732, V-235733, V-235734, V-235735, V-235736, V-235737, V-235738, V-235739, V-235740, V-235741, V-235742, V-235743, V-235744, V-235745, V-235746, V-235747, V-235748, V-235749, V-235750, V-235754, V-235756, V-235760, V-235761, V-235763, V-235764, V-235766, V-235767, V-235768, V-235769, V-235770, V-235771, V-235772, V-235773, V-235774, V-246736, V-235758, and V-235759

## Microsoft Defender STIG Version 2 Release 4
<a name="defender-stig"></a>

The following list contains STIG settings that apply to Windows operating system components for STIG Hardened EC2 AMIs. The following list contains STIG settings that apply for STIG Hardened Windows AMIs. Not all settings apply in all cases. For example, some STIG settings might not apply to standalone servers. Organization-specific policies can also affect which settings apply, such as a requirement for administrators to review document settings.

For a complete list of Windows STIGs, see the [STIGs Document Library](https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=windows). For information about how to view the complete list, see [STIG Viewing Tools](https://public.cyber.mil/stigs/srg-stig-tools/).

**Microsoft Defender on Windows Server 2022**  
V-213427, V-213429, V-213430, V-213431, V-213432, V-213433, V-213434, V-213435, V-213436, V-213437, V-213438, V-213439, V-213440, V-213441, V-213442, V-213443, V-213444, V-213445, V-213446, V-213447, V-213448, V-213449, V-213450, V-213451, V-213455, V-213464, V-213465, V-213466, V-213426, V-213452, and V-213453

## Version history
<a name="stig-version-history"></a>

The following table provides version history updates for STIG settings that are applied to Windowsoperating systems and Windowscomponents.


| Date | AMIs | Details | 
| --- | --- | --- | 
| 06/19/2025 |  Windows Server 2022 STIG Version 2 Release 4 Windows Server 2019 STIG Version 3 Release 4 Windows Server 2016 STIG Version 2 Release 10 Windows Server 2012 R2 MS STIG Version 3 Release 5 Microsoft .NET Framework 4.0 STIG Version 2 Release 6 WindowsFirewall STIG Version 2 Release 2 Internet Explorer 11 STIG Version 2 Release 5 Microsoft Edge STIG Version 2 Release 2 Microsoft Defender STIG Version 2 Release 4  | AMIs released for 2025 Q1 and Q2 with updated versions where applicable, and applied STIGs. | 
| 03/06/2025 |  Windows Server 2022 STIG Version 2 Release 2 Windows Server 2019 STIG Version 3 Release 2 Windows Server 2016 STIG Version 2 Release 9 Windows Server 2012 R2 MS STIG Version 3 Release 5 Microsoft .NET Framework 4.0 STIG Version 2 Release 2 WindowsFirewall STIG Version 2 Release 2 Internet Explorer 11 STIG Version 2 Release 5 Microsoft Edge STIG Version 2 Release 2 Microsoft Defender STIG Version 2 Release 4  | AMIs released for 2024 Q4 with updated versions where applicable, and applied STIGs. | 
| 04/24/2023 |  Windows Server 2022 STIG Version 1 Release 1 Microsoft Edge STIG Version 1 Release 6 Microsoft Defender STIG Version 2 Release 4  | Added support for Windows Server 2022, Microsoft Edge, and Microsoft Defender. | 
| 03/01/2023 |  Windows Server 2019 STIG Version 2 Release 5 Windows Server 2016 STIG Version 2 Release 5 Windows Server 2012 R2 MS STIG Version 3 Release 5 Microsoft .NET Framework 4.0 STIG Version 2 Release 2 WindowsFirewall STIG Version 2 Release 1 Internet Explorer 11 STIG Version 2 Release 3  | AMIs released for 2022 Q4 with updated versions where applicable, and applied STIGs. | 
| 07/21/2022 |  Windows Server 2019 STIG Version 2 R4 Windows Server 2016 STIG Version 2 R4 Windows Server 2012 R2 MS STIG Version 3 R3 Microsoft .NET Framework 4.0 STIG Version 2 R1 WindowsFirewall STIG Version 2 R1 Internet Explorer 11 STIG V1 R19  | AMIs released with updated versions where applicable, and applied STIGs. | 
| 12/15/2021 |  Windows Server 2019 STIG Version 2 R3 Windows Server 2016 STIG Version 2 R3 Windows Server 2012 R2 STIG Version 3 R3 Microsoft .NET Framework 4.0 STIG Version 2 R1 WindowsFirewall STIG Version 2 R1 Internet Explorer 11 STIG V1 R19  | AMIs released with updated versions where applicable, and applied STIGs. | 
| 6/9/2021 |  Windows Server 2019 STIG Version 2 R2 Windows Server 2016 STIG Version 2 R2 Windows Server 2012 R2 STIG Version 3 R2 Microsoft .NET Framework 4.0 STIG Version 2 R1 WindowsFirewall STIG V1 R7 Internet Explorer 11 STIG V1 R19  | Updated versions where applicable, and applied STIGs. | 
| 4/5/2021 |  Windows Server 2019 STIG Version 2 R 1 Windows Server 2016 STIG Version 2 R 1 Windows Server 2012 R2 STIG Version 3 R 1 Microsoft .NET Framework 4.0 STIG Version 2 R 1 WindowsFirewall STIG V1 R 7 Internet Explorer 11 STIG V1 R 19  | Updated versions where applicable, and applied STIGs. | 
| 9/18/2020 |  Windows Server 2019 STIG V1 R 5 Windows Server 2016 STIG V1 R 12 Windows Server 2012 R2 STIG Version 2 R 19 Internet Explorer 11 STIG V1 R 19 Microsoft .NET Framework 4.0 STIG V1 R 9 WindowsFirewall STIG V1 R 7  | Updated versions and applied STIGs. | 
| 12/6/2019 | Server 2012 R2 Core and Base V2 R17 Server 2016 Core and Base V1 R11 Internet Explorer 11 V1 R18 Microsoft .NET Framework 4.0 V1 R9 WindowsFirewall STIG V1 R17  | Updated versions and applied STIGs. | 
| 9/17/2019 | Server 2012 R2 Core and Base V2 R16 Server 2016 Core and Base V1 R9 Server 2019 Core and Base V1 R2 Internet Explorer 11 V1 R17 Microsoft .NET Framework 4.0 V1 R8 | Initial release. | 

# AWS Windows Server NitroTPM enabled AMIs
<a name="ami-windows-tpm"></a>

Amazon creates a set of AMIs that are pre-configured with NitroTPM and UEFI Secure Boot requirements, as follows:
+ The TPM 2.0 Command Response Buffer (CRB) driver is installed
+ NitroTPM is enabled
+ UEFI Secure Boot mode is enabled with Microsoft keys

For more detailed information about NitroTPM, see [NitroTPM for Amazon EC2 instances](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/nitrotpm.html) in the *Amazon EC2 User Guide*.

## Find Windows Server AMIs configured with NitroTPM and UEFI Secure Boot
<a name="ami-windows-tpm-find"></a>

AWS managed AMIs always include the AMI creation date as part of the name. The best way to ensure that your search returns the AMIs that you're looking for is to add date filtering for the name. Use one of the following command line options to find an AMI.

------
#### [ AWS CLI ]

**Find the latest NitroTPM and UEFI Secure Boot AMIs**  
The following example retrieves a list of the latest Windows Server AMIs that are configured for NitroTPM and UEFI Secure Boot.

```
aws ssm get-parameters-by-path \
    --path "/aws/service/ami-windows-latest" \
    --recursive \
    --query 'Parameters[*].{Name:Name,Value:Value}' \
    --output text | grep "TPM-Windows_Server" | sort
```

**Find a specific AMI**  
The following example retrieves Windows Server AMIs that are configured for NitroTPM and UEFI Secure Boot by filtering on the AMI name, the owner, the platform, and the creation date (year and month). Output is formatted as a table with columns for the AMI name and image ID.

```
aws ec2 describe-images \
    --owners amazon \
    --filters \
        "Name=name,Values=TPM-Windows_Server-*" \
        "Name=platform,Values=windows" \
        "Name=creation-date,Values=2025-05*" \
    --query 'Images[].[Name,ImageId]' \
    --output text | sort
```

------
#### [ PowerShell (recommended) ]

**Find the latest NitroTPM and UEFI Secure Boot AMIs**  
The following example retrieves a list of the latest Windows Server AMIs that are configured for NitroTPM and UEFI Secure Boot.

```
Get-SSMLatestEC2Image `
    -Path ami-windows-latest `
    -ImageName TPM-Windows* |
Sort-Object Name
```

**Note**  
If this command doesn't run in your environment, you might be missing a PowerShell module. For more information about this command, see [Get-SSMLatestEC2Image Cmdlet](https://docs.aws.amazon.com/powershell/v4/reference/items/Get-SSMLatestEC2Image.html).  
Alternatively, you can use the [CloudShell console](https://console.aws.amazon.com/cloudshell/home) and run `pwsh` to bring up a PowerShell prompt that already has all of the AWS tools installed. For more information, see the [AWS CloudShell User Guide](https://docs.aws.amazon.com/cloudshell/latest/userguide/welcome.html).

**Find a specific AMI**  


The following example retrieves Windows Server AMIs that are configured for NitroTPM and UEFI Secure Boot by filtering on the AMI name, the owner, the platform, and the creation date (year and month). Output is formatted as a table with columns for the AMI name and image ID.

```
Get-EC2Image `
    -Owner amazon `
    -Filter @(
        @{Name = "name"; Values = @("TPM-Windows*")}
        @{Name = "platform"; Values = @("windows")}
        @{Name = "creation-date"; Values = @("2026*")}
    ) |
Sort-Object Name |
Format-Table Name, ImageID -AutoSize
```

------

# How Amazon creates AWS Windows AMIs
<a name="windows-ami-versions"></a>

The following content is a high level overview of the process Amazon uses to create AWS Windows AMIs. Details include what you can expect from an official AWS Windows AMI, as well as the standards that Amazon uses to validate AMI security and reliability.

## Where AWS gets the Windows Server installation media
<a name="windows-server-media"></a>

When a new version of Windows Server is released, we download the Windows ISO from Microsoft and validate the hash Microsoft publishes. An initial AMI is then created from the Windows distribution ISO. The drivers needed to boot on EC2 are included in addition to our EC2 launch agent. To prepare this initial AMI for public release, we perform automated processes to convert the ISO to an AMI. This prepared AMI is used for the monthly automated update and release process.

## What to expect from an official AWS Windows AMI
<a name="windows-ami-creation-standards"></a>

Amazon provides AWS Windows AMIs with a variety of configurations for popular versions of Microsoft supported Windows Server Operating Systems. As outlined in the previous section, we start with the Windows Server ISO from Microsoft’s Volume Licensing Service Center (VLSC) and validate the hash to ensure it matches Microsoft’s documentation for new Windows Server operating systems.

We perform the following changes using automation on AWS to take the current Windows Server AMIs and update them:
+ Install all Microsoft recommended Windows security patches. We release images shortly after the monthly Microsoft patches are made available.
+ Install the latest drivers for AWS hardware, including network and disk drivers, the EC2WinUtil utility for troubleshooting, as well as GPU drivers in selected AMIs.
+ Include the following AWS launch agent software by default:
  + [https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2launch-v2.html](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2launch-v2.html) for Windows Server 2022 and 2025, and optionally for Windows Server 2019 and 2016 with specific AMIs.
  + [https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2launch.html](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2launch.html) for Windows Server 2016 and 2019.
  + [https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2config-service.html](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2config-service.html) for Windows Server 2012 R2 and earlier.
+ Configure Windows Time to use the [Amazon Time Sync Service](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/set-time.html).
+ Change all power schemes to set the display to never turn off.
+ Perform minor bug fixes – generally one-line registry changes to enable or disable features that we have found to improve performance on AWS.
+ Tests and validates AMIs across new and existing EC2 platforms to help ensure compatibility, stability, and consistency before release.

For a more detailed list that includes initialization, installation, and configuration settings that are applied, see [Updates applied for AWS Windows AMIs](windows-ami-configuration.md).

## How Amazon validates security, integrity, and authenticity of software on AMIs
<a name="validate-amis"></a>

We take a number of steps during the image build process, to maintain the security, integrity, and authenticity of AWS Windows AMIs. A few examples include:
+ AWS Windows AMIs are built using source media obtained directly from Microsoft.
+ Windows Updates are downloaded directly from Microsoft’s Windows Update Service by Windows, and installed on the instance used to create the AMI during the image build process.
+ AWS Software is downloaded from secure S3 buckets and installed in the AMIs.
+ Drivers, such as for the chipset and GPU, are obtained directly from the vendor, stored in secure S3 buckets, and installed on the AMIs during the image build process.

## How Amazon decides which AWS Windows AMIs to offer
<a name="windows-ami-creation-standards-AMI-type"></a>

Each AMI is extensively tested prior to release to the public. We periodically streamline our AMI offerings to simplify customer choice and to reduce costs.
+ New AMI offerings are created for new OS releases. You can count on Amazon releasing *Base*, *Core*, and *SQL Express/Standard/Web/Enterprise* offerings in English and other widely used languages. The primary difference between Base and Core offerings is that Base offerings have a desktop/GUI whereas Core offerings are PowerShell command line only. For more information, see [Windows Server Core](https://learn.microsoft.com/en-us/windows-server/administration/server-core/what-is-server-core) on the Microsoft website.
+ New AMI offerings are created to support new platforms – for example, the Deep Learning andNvidia AMIs were created to support customers using our GPU-based instance types (P2 and P3, G3, and others).
+ Less popular AMIs are sometimes removed. If we see a particular AMI is launched only a few times in its entire lifespan, we will remove it in favor of more widely used options.

If there is an AMI variant that you would like to see, let us know by opening a support case, or by [providing feedback](https://repost.aws/knowledge-center/send-feedback-aws).

## Patches, security updates, and AMI IDs
<a name="ami-patches-security-ID"></a>

Amazon provides updated, fully-patched AWS Windows AMIs within five business days of Microsoft's patch Tuesday (the second Tuesday of each month). The new AMIs are available immediately from the **Images** page in the Amazon EC2 console. The new AMIs are available in the AWS Marketplace and the **Quick Start** tab of the launch instance wizard within a few days of their release.

**Note**  
Instances launched from Windows Server 2019 and later AMIs may show a Windows Update dialog message stating "Some settings are managed by your organization." This message appears as a result of changes in Windows Server 2019 and does not impact the behavior of Windows Update or your ability to manage update settings.  
To remove this warning, see ["Some settings are managed by your organization"](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/common-messages.html#some-settings-managed-by-org).

AWS Windows AMIs are publicly available for three months after they are released. Within 10 days after the release of new AMIs, AWS changes access for AMIs that are more than three months old to make them private.

After AWS makes an AMI private, you may no longer retrieve it by any method. In the console, the **AMI ID** field for a private AMI states, `Cannot load detail for ami-1234567890abcdef0. You may not be permitted to view it.`

If an AMI is deprecated but is not yet marked private, you can still use it. However, we recommend that you always use the latest version.

The AWS Windows AMIs; in each release have new AMI IDs. Therefore, we recommend that you write scripts that locate the latest AWS Windows AMIs by their names, rather than by their IDs. For more information, see the following examples:
+ [https://docs.aws.amazon.com/powershell/latest/userguide/pstools-ec2-get-amis.html#pstools-ec2-get-ec2imagebyname](https://docs.aws.amazon.com/powershell/latest/userguide/pstools-ec2-get-amis.html#pstools-ec2-get-ec2imagebyname) (AWS Tools for Windows PowerShell)
+ [Query for the Latest AWS Windows AMI Using Systems Manager Parameter Store](https://aws.amazon.com/blogs/mt/query-for-the-latest-windows-ami-using-systems-manager-parameter-store/)
+ [Walkthrough: Looking Up Amazon Machine Image IDs](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/walkthrough-custom-resources-lambda-lookup-amiids.html) (AWS Lambda, AWS CloudFormation)

# Ports and Protocols for AWS Windows AMIs
<a name="ports-and-protocols"></a>

The following tables list the ports, protocols, and directions by workload for AWS Windows Amazon Machine Images (AMIs).

**Topics**
+ [AllJoyn Router](#alljoyntcpin-ports)
+ [Cast to Device](#cast-to-device)
+ [Core Networking](#networking-ports)
+ [Delivery Optimization](#delivery-optimization)
+ [Diag Track](#diag)
+ [DIAL Protocol Server](#dial-protocol)
+ [File and Printer Sharing](#file-and-print)
+ [File Server Remote Management](#file-server-remote)
+ [ICMP v4 All](#icmp-v4)
+ [Microsoft Edge](#protocol-edge)
+ [Microsoft Media Foundation Network Source](#protocol-media-foundation)
+ [Multicast](#multicast)
+ [Remote Desktop](#remote-desktop)
+ [WindowsDevice Management](#device-management)
+ [WindowsFeature Experience Pack](#remote-management)
+ [WindowsFirewall Remote Management](#firewall-remote)
+ [WindowsRemote Management](#remote-management)

## AllJoyn Router
<a name="alljoyntcpin-ports"></a>

[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ports-and-protocols.html)

## Cast to Device
<a name="cast-to-device"></a>

[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ports-and-protocols.html)

## Core Networking
<a name="networking-ports"></a>

------
#### [ Windows Server 2016, 2019, and 2022 ]

[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ports-and-protocols.html)

------
#### [ Windows Server 2012 and 2012 R2 ]

[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ports-and-protocols.html)

------

## Delivery Optimization
<a name="delivery-optimization"></a>

[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ports-and-protocols.html)

## Diag Track
<a name="diag"></a>

------
#### [ Windows Server 2019 and 2022 ]


| OS | Rule | Definition | Port | Protocol | Direction | 
| --- | --- | --- | --- | --- | --- | 
|  Windows Server 2019 Windows Server 2022  | Connected User Experiences and Telemetry | Unified Telemetry Client Outbound Traffic. |  Local: Any Remote: 443  | TCP | Out | 

------
#### [ Windows Server 2016 ]


| OS | Rule | Definition | Port | Protocol | Direction | 
| --- | --- | --- | --- | --- | --- | 
| Windows Server 2016 | Connected User Experiences and Telemetry | Unified Telemetry Client Outbound Traffic. |  Local: Any Remote: Any  | TCP | Out | 

------

## DIAL Protocol Server
<a name="dial-protocol"></a>


| OS | Rule | Definition | Port | Protocol | Direction | 
| --- | --- | --- | --- | --- | --- | 
| Windows Server 2016 Windows Server 2019 Windows Server 2022 | DIAL protocol server (HTTP-In) | Inbound rule for DIAL protocol server to allow remote control of Apps using HTTP.  |  Local: 10247 Remote: Any  | TCP | In | 

## File and Printer Sharing
<a name="file-and-print"></a>

[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ports-and-protocols.html)

## File Server Remote Management
<a name="file-server-remote"></a>

[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ports-and-protocols.html)

## ICMP v4 All
<a name="icmp-v4"></a>


| OS | Rule | Port | Protocol | Direction | 
| --- | --- | --- | --- | --- | 
| Windows Server 2012 Windows Server 2012 R2 | All ICMP v4 | Local: 139 Remote: Any | ICMPv4 | In | 

## Microsoft Edge
<a name="protocol-edge"></a>


| OS | Rule | Port | Protocol | Direction | 
| --- | --- | --- | --- | --- | 
| Windows Server 2022  | Microsoft Edge (mDNS-In) | Local: 5353 Remote: Any | UDP | In | 

## Microsoft Media Foundation Network Source
<a name="protocol-media-foundation"></a>

[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ports-and-protocols.html)

## Multicast
<a name="multicast"></a>

------
#### [ Windows Server 2019 and 2022 ]

[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ports-and-protocols.html)

------
#### [ Windows Server 2016 ]

[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ports-and-protocols.html)

------

## Remote Desktop
<a name="remote-desktop"></a>

------
#### [ Windows Server 2012 R2, 2016, 2019, and 2022 ]

[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ports-and-protocols.html)

------
#### [ Windows Server 2012 ]

[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ports-and-protocols.html)

------

## WindowsDevice Management
<a name="device-management"></a>

------
#### [ Windows Server 2022 ]

[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ports-and-protocols.html)

------
#### [ Windows Server 2019 ]

[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ports-and-protocols.html)

------

## WindowsFeature Experience Pack
<a name="remote-management"></a>


| OS | Rule | Definition | Port | Protocol | Direction | 
| --- | --- | --- | --- | --- | --- | 
|  Windows Server 2022  | WindowsFeature Experience Pack | WindowsFeature Experience Pack. |  | Any | Out | 

## WindowsFirewall Remote Management
<a name="firewall-remote"></a>

[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ports-and-protocols.html)

## WindowsRemote Management
<a name="remote-management"></a>


| OS | Rule | Definition | Port | Protocol | Direction | 
| --- | --- | --- | --- | --- | --- | 
|  Windows Server 2012 Windows Server 2012 R2 Windows Server 2016 Windows Server 2019 Windows Server 2022  | WindowsRemote Management (HTTP-In) | Inbound rule for WindowsRemote Management via WS-Management.  | Local: 5985 Remote: Any | TCP | In | 

 For more information about Amazon EC2 security groups, see [Amazon EC2 Security Groups for WindowsInstances](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-security-groups.html).

# Updates applied for AWS Windows AMIs
<a name="windows-ami-configuration"></a>

To help ensure a smooth and consistent launch experience, AWS Windows AMIs include the following updates for initialization, installation, and configuration.

**Note**  
When you launch an instance from an Amazon managed AWS Windows AMI, the root device for the Windows instance is an Amazon Elastic Block Store (Amazon EBS) volume. AWS Windows AMIs don't support instance store for the root device.


**Clean and prepare**  

| Description | Applies to | 
| --- | --- | 
| Check for pending file renames or reboots, and reboot as needed | All AMIs | 
| Delete `.dmp` files | All AMIs | 
| Delete logs (event logs, Systems Manager, EC2Config) | All AMIs | 
| Delete temporary folders and files for Sysprep | All AMIs | 
| Perform virus scan | All AMIs | 
| Pre-compile queued .NET assemblies (before Sysprep) | All AMIs | 
| Restore default values for Microsoft browsers | All AMIs | 
| Reset the Windows wallpaper | All AMIs | 
| Run Sysprep | All AMIs | 
| Set EC2Launch v1 to run at the next launch | Windows Server 2016 and 2019 | 
| Run Windows maintenance tools | Windows Server 2012 R2 and later | 
| Clear recent history (Start menu, Windows Explorer, and more) | Windows Server 2012 R2 and earlier | 
| Restore default values for EC2Config | Windows Server 2012 R2 and earlier | 


**Install and configure**  

| Description | Applies to | 
| --- | --- | 
| Disable Secure Time Seeding | All AMIs | 
| Add links to the Amazon EC2 Windows Guide | All AMIs | 
| Attach instance storage volumes to extended mount points | All AMIs | 
| Install the current AWS Tools for Windows PowerShell | All AMIs | 
| Install the current CloudFormation bootstrap scripts | All AMIs | 
| Disable RunOnce for Internet Explorer | All AMIs | 
| Enable remote PowerShell | All AMIs | 
| Disable hibernation and delete the hibernation file | All AMIs | 
| Disable the Connected User Experiences and Telemetry service | All AMIs | 
| Set the performance options for best performance | All AMIs | 
| Set the power setting to high performance | All AMIs | 
| Disable the screen saver password | All AMIs | 
| Set the RealTimeIsUniversal registry key | All AMIs | 
| Set the timezone to UTC | All AMIs | 
| Disable Windows updates and notifications | All AMIs | 
| Run Windows Update and reboot until there are no pending updates | All AMIs | 
| Set the display in all power schemes to never turn off | All AMIs | 
| Set the PowerShell execution policy to "Unrestricted" | All AMIs | 
|  If Microsoft SQL Server is installed: [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/windows-ami-configuration.html)  | All AMIs | 
|  Configure a paging file on the system volume as follows: [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/windows-ami-configuration.html)  | All AMIs | 
| Install the current EC2Launch v2 and SSM Agent | Windows Server 2022 and later | 
| Install the current EC2Launch v1 and SSM Agent | Windows Server 2016 and 2019 | 
| Install the current SRIOV drivers | Windows Server 2012 R2 and later | 
| Install the current EC2WinUtil driver | Windows Server 2008 R2 and later | 
| Install the current EC2Config and SSM Agent | Windows Server 2012 R2 and earlier | 
| Install the current AWS PV, ENA, and NVMe drivers | Windows Server 2008 R2 and later | 
| Allow ICMP traffic through the firewall | Windows Server 2012 R2 and earlier | 
|  Configure an additional system managed paging file on `Z:`, if available  | Windows Server 2012 R2 and earlier | 
| Enable file and printer sharing | Windows Server 2012 R2 and earlier | 
| Install the current Citrix PV driver | Windows Server 2008 SP2 and earlier | 
| Install PowerShell 2.0 and 3.0 | Windows Server 2008 SP2 and R2 | 
|  Apply the following hotfixes: [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/windows-ami-configuration.html)  | Windows Server 2008 SP2 and R2 | 

# Changes in Windows Server AMIs by OS version
<a name="winserver-ami-changes"></a>

AWS provides AMIs for Windows Server 2016 and later. These AMIs include the following high-level changes between AWS Windows AMIs for different Windows operating system versions:

## Windows Server 2025
<a name="win2025-ami-differences"></a>
+ Windows Server 2025 AMIs use UEFI boot mode by default, except for Windows Server 2025 AMIs named `BIOS-Windows_Server-2025-English-Full-Base`.
**Note**  
EC2 metal instance sizes and some EC2 instance types do not support UEFI boot mode for Windows Server. To launch Windows Server 2025 on these instances, you must use the AWS managed `BIOS-Windows_Server-2025-English-Full-Base` AMI, or an AMI that is based on that image. For more information about UEFI requirements, [Requirements for UEFI boot mode](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/launch-instance-boot-mode.html) in the *Amazon EC2 User Guide*.
+ Windows Server 2025 AMIs support Nitro EC2 instance types only.
+ Windows Server 2025 AMIs use `gp3` EBS volume types by default.
+ Windows Server 2025 AMIs use the AWS.Tools PowerShell module.

## Windows Server 2016-2022
<a name="win2016-2022-ami-differences"></a>
+ To accommodate the change from .NET Framework to .NET Core, the EC2Config service has been deprecated on Windows Server 2016 AMIs and replaced by EC2Launch. EC2Launch is a bundle of Windows PowerShell scripts that perform many of the tasks performed by the EC2Config service. For more information, see [Configure a Windows instance using EC2Launch](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2launch.html). EC2Launch v2 replaces EC2Launch in Windows Server 2022 and later. For more information, see [Configure a Windows instance using EC2Launch v2](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2launch-v2.html).
+ On earlier versions of Windows Server AMIs, you can use the EC2Config service to join an EC2 instance to a domain and configure integration with Amazon CloudWatch. On Windows Server 2016 and later AMIs, you can use the CloudWatch agent to configure integration with Amazon CloudWatch. For more information about configuring instances to send log data to CloudWatch, see [Collect Metrics and Logs from Amazon EC2 Instances and On-Premises Servers with the CloudWatch Agent](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Install-CloudWatch-Agent.html). For information about joining an EC2 instance to a domain, see [ Join an Instance to a Domain Using the `AWS-JoinDirectoryServiceDomain` JSON Document](https://docs.aws.amazon.com/systems-manager/latest/userguide/walkthrough-powershell.html#walkthrough-powershell-domain-join) in the *AWS Systems Manager User Guide*.

**Other differences**

Note the following additional important differences for instances created from Windows Server 2016 and later AMIs.
+ By default, EC2Launch does not initialize secondary EBS volumes. You can configure EC2Launch to initialize disks automatically by either scheduling the script to run or by calling EC2Launch in user data. For the procedure to initialize disks using EC2Launch, see "Initialize Drives and Drive Letter Mappings" in [Configure EC2Launch](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2launch.html#ec2launch-config).
+ If you previously enabled CloudWatch integration on your instances by using a local configuration file (`AWS.EC2.Windows.CloudWatch.json`), you can configure the file to work with the SSM Agent on instances created from Windows Server 2016 and later AMIs.

# AWS Windows AMI version history
<a name="ec2-windows-ami-version-history"></a>

The following tables summarize the changes to each release of the AWS Windows AMIs. Note that some changes apply to all AWS Windows AMIs, while others apply to only a subset of these AMIs.

For more information about components included in these AMIs, see the following:
+ [EC2Launch v2 version history](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2launchv2-versions.html#ec2launchv2-version-history)
+ [EC2Launch v1 version history](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2launch-version-details.html)
+ [EC2Config version history](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2config-version-details.html)
+ [Systems Manager SSM Agent Release Notes](https://github.com/aws/amazon-ssm-agent/blob/mainline/RELEASENOTES.md)
+ [Amazon ENA driver versions](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/enhanced-networking-ena.html#ena-adapter-driver-versions)
+ [AWS NVMe driver versions](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/nvme-driver-version-history.html)
+ [Paravirtual drivers for Windows instances](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/xen-drivers-overview.html)
+ [AWS Tools for PowerShell Change Log](https://github.com/aws/aws-tools-for-powershell/blob/master/CHANGELOG.md)

## Monthly AMI updates for 2026 (to date)
<a name="amis-2026"></a>


| Release | Changes | 
| --- | --- | 
| 2026.04.15 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated January 14, 2026 and earlier will be made private after May 11, 2026, 10 AM Pacific.  | 
| 2026.03.11 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated December 10, 2025 and earlier will be made private after April 13, 2026, 10 AM Pacific.  | 
| 2026.02.11 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated November 12, 2025 and earlier will be made private after March 9, 2026, 10 AM Pacific.  | 
| 2026.01.14 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated October 15, 2025 and earlier will be made private after February 9, 2026, 10 AM Pacific.  | 

## Monthly AMI updates for 2025
<a name="amis-2025"></a>

For more information, see [Description of Software Update Services and Windows Server Update Services changes in content for 2025 (KB894199)](https://support.microsoft.com/en-us/topic/description-of-software-update-services-and-windows-server-update-services-changes-in-content-for-2024-kb894199-0c540f4f-60c8-7dc2-23c9-48153749966d) on the Microsoft website.

**Note**  
Beginning January 2026, AWS Windows AMIs will ship with version 5 of AWS PowerShell or AWS.Tools for PowerShell. This major version update includes changes that may impact existing scripts and workflows. For more information, review the following documents:  
[Migrating to V5](https://docs.aws.amazon.com/powershell/v5/userguide/migrating-v5.html) in the *AWS.Tools for PowerShell User Guide*
[AWS.Tools for PowerShell V5 release announcement](https://aws.amazon.com/blogs/developer/aws-tools-for-powershell-v5-now-generally-available/)


| Release | Changes | 
| --- | --- | 
| 2025.12.10 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated September 10, 2025 and earlier will be made private after January 12, 2026, 10 AM Pacific.  | 
| 2025.11.20 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2025.11.12 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated August 13, 2025 and earlier will be made private after December 8, 2025, 10 AM Pacific.  | 
| 2025.10.15 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated July 9, 2025 and earlier will be made private after November 10, 2025, 10 AM Pacific.  | 
| 2025.09.10 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated June 11, 2025 and earlier will be made private after October 13, 2025, 10 AM Pacific.  | 
| 2025.08.13 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated May 15, 2025 and earlier will be made private after September 8, 2025, 10 AM Pacific. New Windows AMIs: [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2025.07.09 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated April 9, 2025 and earlier will be made private after August 11, 2025, 10 AM Pacific.  The following image types are no longer receiving updates and the final versions will become private after September 8th, 2025. If you wish to retain access to one of these image types, you can create a copy in your account prior to this date.   Windows\$1Server-2016-English-Core-SQL\$12016\$1SP3\$1Enterprise   Windows\$1Server-2016-English-Core-SQL\$12016\$1SP3\$1Standard   Windows\$1Server-2016-English-Core-SQL\$12016\$1SP3\$1Web   Windows\$1Server-2016-English-Full-HyperV   Windows\$1Server-2016-English-Tesla   Windows\$1Server-2016-Japanese-Full-SQL\$12016\$1SP3\$1Enterprise   Windows\$1Server-2016-Japanese-Full-SQL\$12016\$1SP3\$1Express   Windows\$1Server-2016-Japanese-Full-SQL\$12016\$1SP3\$1Standard   Windows\$1Server-2016-Japanese-Full-SQL\$12016\$1SP3\$1Web   Windows\$1Server-2019-English-Full-HyperV     | 
| 2025.06.11 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated March 12, 2025 and earlier will be made private after July 7, 2025, 10 AM Pacific.  | 
| 2025.05.15 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) New Windows AMIs: `BIOS-Windows_Server-2025-English-Core-Base`. Previous versions of Amazon-published AWS Windows AMIs dated Febuary 12, 2025 and earlier will be made private after June 9, 2025, 10 AM Pacific.  | 
| 2025.04.09 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated January 15, 2025 and earlier will be made private after May 13, 2025, 10 AM Pacific.  | 
| 2025.03.12 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated December 13, 2024 and earlier will be made private after April 8, 2025, 10 AM Pacific.  Beginning March 2025, R Services and Machine Learning Services with R and Python runtimes are no longer enabled by default on SQL Server 2016, 2017, and 2019 AMIs. These features include runtimes that are not maintained through SQL server cumulative updates. You can enable these features on your instance launched from our SQL Server AMIs using the SQL installation media included at C:\$1SQLServerSetup.   | 
| 2025.02.13 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated November 19, 2024 and earlier will be made private after March 11, 2025, 10 AM Pacific.  | 
| 2025.01.15 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated October 9, 2024 and earlier will be made private after February 11, 2025, 10 AM Pacific.  | 

## Monthly AMI updates for 2024
<a name="amis-2024"></a>

For more information, see [Description of Software Update Services and Windows Server Update Services changes in content for 2024](https://support.microsoft.com/en-us/topic/description-of-software-update-services-and-windows-server-update-services-changes-in-content-for-2024-d92ff664-8f4a-4224-b61f-c8a2b85d130c) on the Microsoft website.


| Release | Changes | 
| --- | --- | 
| 2024.12.13 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated September 11, 2024 and earlier will be made private after January 15, 2025, 10 AM Pacific.  | 
| 2024.11.19 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) This SSM Agent version addresses an issue where Windows Server 2025 instances may not connect to Systems Manager Sessions Manager or Fleet Manager RDP.  This is a partial release. Only Windows Server 2025 AMIs are included in this release.   | 
| 2024.11.13 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated August 14, 2024 and earlier will be made private after December 11, 2024, 10 AM Pacific.  | 
| 2024.11.04 | Release AMIs for Windows Server 2025. Windows Server 2025 AMIs are configured with UEFI boot-mode, gp3 root volumes, and have IMDS V2 enabled by default. A BIOS configured AMI is available for use on Bare Metal platforms and Nitro instances where UEFI support is not available. [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2024.10.09 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated July 10, 2024 and earlier will be made private after November 11, 2024, 10 AM Pacific.  Starting in October, default root volume sizes on some AMIs changed to provide additional free space for the configuration changes applied to the images. For all Core or Full Base Images, including EC2Launch v2 and TPM versions, the root volume size remains 30GB. For all Windows AMIs with SQL Server, the root volume size is now 75GB. For all other Windows AMI configurations, the root volume size is now 50GB.   | 
| 2024.09.11 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated June 13, 2024 and earlier will be made private after October 7, 2024, 10 AM Pacific.  | 
| 2024.08.14 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated May 15, 2024 and earlier will be made private after September 9, 2024, 10 AM Pacific.  | 
| 2024.07.10 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated April 10, 2024 and earlier will be made private after August 12, 2024, 10 AM Pacific.  | 
| 2024.06.13 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated March 13, 2024 and earlier will be made private after July 8, 2024, 10 AM Pacific.  | 
| 2024.05.15 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated February 14, 2024 and earlier will be made private after June 10, 2024, 10 AM Pacific.  | 
| 2024.04.10 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated January 16, 2024 and earlier will be made private after May 13, 2024, 10 AM Pacific.  | 
| 2024.03.13 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  To ensure that you always receive valid time from your configured Network Time Protocol (NTP) service, Secure Time Seeding (STS) is disabled on all AWS Windows AMIs from this version forward. Amazon Time Sync Service is the default NTP service for all AWS Windows AMIs that Amazon provides.    Previous versions of Amazon-published AWS Windows AMIs dated December 13, 2023 and earlier will be made private after April 8, 2024, 10 AM Pacific.  | 
| 2024.02.14 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated November 15, 2023 and earlier will be made private after March 11, 2024, 10 AM Pacific.  | 
| 2024.01.16 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2024.01.10 (Deprecated) |   *Due to functional issues with EC2Launch v1 and EC2Launch v2, this AMI version is marked as deprecated. The AMIs are still available for launch, and are described by directly referencing their AMI ID. However, they will no longer appear in search results for public AMIs. We recommend that you use the latest AMI version, dated 2024.01.16.*  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated October 11, 2023 and earlier will be made private after February 12th 2024, 10 AM Pacific.  | 

## Monthly AMI updates for 2023
<a name="amis-2023"></a>

For more information, see [Description of Software Update Services and Windows Server Update Services changes in content for 2023](https://support.microsoft.com/en-us/help/894199/description-of-software-update-services-and-windows-server-update-serv-2023) on the Microsoft website.


| Release | Changes | 
| --- | --- | 
| 2023.12.13 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated September 13, 2023 and earlier will be made private after January 8th 2024, 10 AM Pacific.  | 
| 2023.11.15 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated August 10, 2023 and earlier were made private.  | 
| 2023.10.11 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated July 12, 2023 and earlier were made private.  | 
| 2023.09.13 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Windows Server 2012 RTM and Window Server 2012 R2 will reach End of Support (EOS) on October 10, 2023 and will no longer receive regular security updates from Microsoft. On this date, AWS will no longer publish or distribute Windows Server 2012 RTM or Windows Server 2012 R2 AMIs. Existing instances running Windows Server 2012 RTM and Windows Server 2012 R2 will not be impacted. Custom AMIs in your account will also not be impacted. You can continue to use them normally after the EOS date. Previous versions of Amazon-published AWS Windows AMIs dated June 14, 2023 and earlier were made private.  | 
| 2023.08.10 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Windows Server 2012 RTM and Window Server 2012 R2 will reach End of Support (EOS) on October 10, 2023 and will no longer receive regular security updates from Microsoft. On this date, AWS will no longer publish or distribute Windows Server 2012 RTM or Windows Server 2012 R2 AMIs. Existing instances running Windows Server 2012 RTM and Windows Server 2012 R2 will not be impacted. Custom AMIs in your account will also not be impacted. You can continue to use them normally after the EOS date. Previous versions of Amazon-published AWS Windows AMIs dated May 10, 2023 and earlier were made private.  | 
| 2023.07.12 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) .NET Framework 3.5 is now enabled in Windows Server 2012 R2 AMIs due to Microsoft security updates. If these updates are applied before .NET 3.5 is enabled, it is no longer possible to enable the feature. If you prefer to disable .NET 3.5, you can do so through Server Manager or `dism` commands. Previous versions of Amazon-published AWS Windows AMIs dated April 12, 2023 and earlier were made private.  | 
| 2023.06.14 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) The AWS Tools for Windows installation package has been deprecated, and no longer appears as an installed program in AWS Windows AMIs provided by AWS. The AWSPowerShell Module is now installed at `C:\ProgramFiles\WindowsPowerShell\Modules\AWSPowerShell`. The .NET SDK remains located at `C:\ProgramFiles (x86)\AWS SDK for .NET`. For more information see [the blog announcement](https://aws.amazon.com/blogs/developer/announcing-the-end-of-windows-installer-support/). Windows Server 2012 RTM and Windows Server 2012 R2 will reach End of Support (EOS) on October 10, 2023 and will no longer receive regular security updates from Microsoft. On this date, AWS will no longer publish or distribute Windows Server 2012 RTM or Windows Server 2012 R2 AMIs. Existing RTM/R2 instances and custom AMIs in your account will not be impacted, and you can continue to use them after the EOS date. For more information about Microsoft End of Support on AWS, including upgrade and import options, as well as a full list of AMIs that will no longer be published or distributed on October 10, 2023, see the [End of Support for Microsoft Products FAQ](https://aws.amazon.com//windows/faq/#eos-microsoft-products). Previous versions of Amazon-published AWS Windows AMIs dated March 15, 2023 and earlier were made private.  | 
| 2023.05.10 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated February 15, 2023 and earlier were made private.  | 
| 2023.04.12 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated January 19, 2023 and earlier were made private.  | 
| 2023.03.15 | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated December 28, 2022 and earlier were made private.  | 
| 2023.02.15 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) New AWS Windows AMIs with Microsoft SQL Server with support for [NitroTPM](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/nitrotpm.html) and [UEFI Secure Boot](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/uefi-secure-boot.html) have been released. The images include Windows Server 2019 or Windows Server 2022 with SQL Server 2019 or SQL Server 2022. Each SQL Server version is available in Standard and Enterprise editions.Previous versions of Amazon-published AWS Windows AMIs dated November 21, 2022 and earlier were made private. | 
| 2023.01.19 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated October 27, 2022 and earlier were made private.  | 
| 2023.01.11 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 

## Monthly AMI updates for 2022
<a name="amis-2022"></a>

For more information, see [Description of Software Update Services and Windows Server Update Services changes in content for 2022](https://support.microsoft.com/en-us/help/894199/description-of-software-update-services-and-windows-server-update-serv-2022) on the Microsoft website.


| Release | Changes | 
| --- | --- | 
| 2022.12.28 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2022.12.14 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2022.11.21 | [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)Previous versions of Amazon-published AWS Windows AMIs dated August 10, 2022 and earlier were made private. | 
| 2022.11.17 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) This is an out of band release for images that use EC2Config as the default launch agent. This includes all Windows Server 2012 RTM and Windows Server 2012 R2 AMIs. This release updates EC2Config to the latest version to improve support for our newest EC2 instance types.  | 
| 2022.11.10 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2022.10.27 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated July 13, 2022 and earlier were made private.  | 
| 2022.10.12 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2022.09.14 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated June 15, 2022 and earlier were made private.  | 
| 2022.08.10 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated May 25, 2022 and earlier were made private.  | 
| 2022.07.13 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Windows Server version 20H2 will reach end-of-support on August 9, 2022. Existing instances and custom images owned by your account that are based on Windows Server version 20H2 will not be impacted. If you would like to retain access to Windows Server version 20H2, create a custom image in your account prior to August 9, 2022. All public versions of the following images will be made private on the end-of-support date.  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated April 13, 2022 and earlier were made private.  | 
| 2022.06.15 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Microsoft SQL Server 2012 is reaching end-of-support on July 12th, 2022. All public versions of the following images have been made private. Existing instances and custom images owned by your account that are based on Windows Server images containing SQL Server 2012 will not be impacted. [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) For more information on Windows Server product lifecycles, please consult the following Microsoft documentation and AWS Microsoft FAQ: [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2022.05.25 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated February 10, 2022 and earlier were made private.  | 
| 2022.05.11 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2022.05.05 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2022.04.13 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated January 21, 2022 and earlier were made private. [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2022.03.09 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated December 12, 2021 and earlier were made private.  | 
| 2022.02.10 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated November 16, 2021 and earlier were made private.  | 
| 2022.01.19 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated October 13, 2021 and earlier were made private.  | 
| 2022.01.12 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 

## Monthly AMI updates for 2021
<a name="amis-2021"></a>

For more information, see [Description of Software Update Services and Windows Server Update Services changes in content for 2021](https://support.microsoft.com/en-us/help/894199/description-of-software-update-services-and-windows-server-update-serv-2021) on the Microsoft website.


| Release | Changes | 
| --- | --- | 
| 2021.12.15 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated September 15, 2021 and earlier were made private.  | 
| 2021.11.16 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Windows Server 2004 reached End-of-support on December 14, 2021. All public versions of the following images have been made private. Existing instances and custom images owned by your account that are based on Windows Server 2004 will not be impacted.  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2021.11.10 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2021.10.13 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) EC2Launch v1V2\$1Preview AMIs are discontinued, and will not be updated with new versions. However, earlier versions will continue to be available until January 2022. Existing images and custom images based on EC2Launch v1V2\$1Preview AMIs will not be impacted, and you can continue to use them in your account. We recommend that you use the new EC2Launch v2 AMIs going forward to receive security and software updates.  Windows Server 2004 will reach End-of-support on December 14, 2021. All public versions of the following images will be made private on December 14, 2021. Existing instances and custom images owned by your account that are based on Windows Server 2004 will not be impacted. If you want to retain access to Windows Server 2004, create a custom image in your account prior to December 14th.  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated July 14, 2021 and earlier were made private.  | 
| 2021.09.15 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated June 9, 2021 and earlier were made private.  | 
| 2021.09.01 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Windows Server 2022 AMIs include EC2Launch v2 by default. For more information, see [https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2launch-v2.html](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2launch-v2.html). [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated May 12, 2021 and earlier were made private.  | 
| 2021.08.11 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated April 14, 2021 and earlier were made private.  | 
| 2021.07.14 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2021.07.07 |   All AMIs Out-of-band AMI release that applies the July out-of-band security update recently released by Microsoft as an additional mitigation to CVE-34527.   `HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PointAndPrint` is not defined on AWS Windows AMIs provided by AWS, which is the default state.  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of Amazon-published AWS Windows AMIs dated March 10, 2021 and earlier were made private.  | 
| 2021.06.09 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2021.05.12 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2021.04.14 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2021.03.11 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  Amazon Root CAs have been added to the Trusted Root Certification Authorities certificate store on all AMIs. For more information, see [https://www.amazontrust.com/repository/\$1rootcas](https://www.amazontrust.com/repository/#rootcas).  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2021.02.10 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Beginning in March 2021, AWS Windows AMIs provided by AWS include Amazon Root CAs in the certificate store to minimize potential disruption from the upcoming S3 and CloudFront certificate migration, which is scheduled for March 23rd, 2021. For more information, see the following: [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Additionally, AWS will apply "update for Removal of Adobe Flash Player" (KB4577586) to all AWS Windows AMIs in March to remove the built-in Adobe Flash player, which ended support on December 31, 2020. If your use case requires the built-in Adobe Flash player, we recommend creating a custom image based on AMIs with version 2021.02.10 or earlier. For more information about the End of Support of Adobe Flash Player, see [Update on Adobe Flash Player End of Support](https://blogs.windows.com/msedgedev/2020/09/04/update-adobe-flash-end-support/) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2021.01.13 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 

## Monthly AMI updates for 2020
<a name="amis-2020"></a>

For more information, see [Description of Software Update Services and Windows Server Update Services changes in content for 2020](https://support.microsoft.com/en-us/help/4602108/software-update-services-and-windows-server-update-services-2020) on the Microsoft website.


| Release | Changes | 
| --- | --- | 
| 2020.12.09 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2020.11.11 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2020.10.14 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2020.9.25 |  A new version of Amazon Machine Images with SQL Server 2019 dated 2020.09.25 has been released. This release includes the same software components as the previous release dated 2020.09.09 but does not include CU7 for SQL 2019, which has recently been removed from public availability by Microsoft due to a known issue with reliability of the database snapshot feature. For more information, see the following Microsoft blog post: [Cumulative update 7 for SQL Server 2019 RTM](https://techcommunity.microsoft.com/blog/sqlserver/cumulative-update-7-for-sql-server-2019-rtm-removed/1629317) on the Microsoft website. [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2020.9.9 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2020.8.12 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2020.7.15 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2020.7.01 |  A new version of Amazon Machine Images has been released. These images include EC2Launch v2 and serve as a functional preview of the new launch agent in advance of it being included by default on all AWS Windows AMIs currently provided by AWS later this year. Note that some SSM documents and dependent services, such as EC2 Image Builder, may require updates to support EC2 Launch v2. These updates will follow in the coming weeks. These images are not recommended for use in production environments. You can read more about EC2Launch v2 at [https://aws.amazon.com/about-aws/whats-new/2020/07/introducing-ec2-launch-v2-simplify-customizing-windows-instances/](https://aws.amazon.com/about-aws/whats-new/2020/07/introducing-ec2-launch-v2-simplify-customizing-windows-instances/) and [Configure a Windows instance using EC2Launch v2](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2launch-v2.html). All current Windows Server AMIs will continue to be provided without changes to the current launch agent, either EC2Config (Server 2012 RTM or 2012 R2) or EC2Launch v1 v1 (Server 2016 or later), for the next several months. In the near future, all Windows Server AMIs currently provided by AWS will be migrated to use EC2Launch v2 by default as part of the monthly release. EC2Launch v1V2\$1Preview AMIs will be updated monthly and remain available until this migration occurs.  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2020.6.10 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2020.5.27 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2020.5.13 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2020.4.15 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2020.3.18 |  **Windows Server 2019 AMIs** Resolves an intermittent issue discovered in the 2020.3.11 release in which the Background Intelligent Transfer Service (BITS) may not start within the expected time after initial OS boot, potentially resulting in timeouts, BITS errors in the event log, or failures of cmdlets involving BITS invoked quickly after the initial boot. Other Windows Server AMIs are not affected by this issue, and their latest version remains 2020.03.11.  | 
| 2020.3.11 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2020.2.12 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) **Windows Server 2008 SP2 and Windows Server 2008 R2 ** Windows Server 2008 SP2 and Window Server 2008 R2 reached End of Support (EOS) on 01/14/20 and will no longer receive regular security updates from Microsoft. AWS will no longer publish or distribute Windows Server 2008 SP2 or Windows Server 2008 R2 AMIs. Existing 2008 SP2/R2 instances and custom AMIs in your account are not impacted, and you can continue to use them after the EOS date.  For more information about Microsoft End of Service on AWS, including upgrade and import options, as well as a full list of AMIs that are no longer published as of 01/14/2020, see [End of Support (EOS) for Microsoft Products](https://aws.amazon.com/windows/faq/#eos-microsoft-products).  | 
| 2020.1.15 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) **Windows Server 2008 SP2 and Windows Server 2008 R2 ** Windows Server 2008 SP2 and Window Server 2008 R2 reached End of Support (EOS) on 01/14/20 and will no longer receive regular security updates from Microsoft. AWS will no longer publish or distribute Windows Server 2008 SP2 or Windows Server 2008 R2 AMIs. Existing 2008 SP2/R2 instances and custom AMIs in your account are not impacted, and you can continue to use them after the EOS date.  For more information about Microsoft End of Service on AWS, including upgrade and import options, as well as a full list of AMIs that are no longer published as of 01/14/2020, see [End of Support (EOS) for Microsoft Products](https://aws.amazon.com/windows/faq/#eos-microsoft-products).  | 

## Monthly AMI updates for 2019
<a name="amis-2019"></a>

For more information, see [Description of Software Update Services and Windows Server Update Services changes in content for 2019](https://support.microsoft.com/en-us/help/4538374/software-update-services-and-windows-server-update-services-2019) on the Microsoft website.


| Release | Changes | 
| --- | --- | 
| 2019.12.16 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) **Windows Server 2008 SP2 and Windows Server 2008 R2 ** Microsoft will end mainstream support for Windows Server 2008 SP2 and Windows Server 2008 R2 on January 14, 2020. On this date, AWS will no longer publish or distribute Windows Server 2008 SP2 or Windows Server 2008 R2 AMIs. Existing 2008 SP2/R2 instances and custom AMIs in your account will not be impacted and you can continue to use them after the end-of-service (EOS) date.  For more information about Microsoft EOS on AWS, including upgrade and import options, along with a full list of AMIs that will no longer be published or distributed on January 14, 2020, see [End of Support (EOS) for Microsoft Products](https://aws.amazon.com/windows/faq/#eos-microsoft-products).  | 
| 2019.11.13 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of AMIs have been marked private. [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2019.11.05 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2019.10.09 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2019.09.12 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) .NET Core 2.2, Mono 5.18, and PowerShell 6.2 pre-installed to run your .NET applications on Amazon Linux 2 with Long Term Support (LTS)  | 
| 2019.09.11 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of AMIs have been marked private. [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  NLA is now enabled on all 2012 RTM, 2012 R2, and 2016 AMIs to increase default RDP security posture. NLA remains enabled on 2019 AMIs.   | 
| 2019.08.16 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2019.07.19 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2019.07.12 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2019.06.12 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Previous versions of AMIs have been marked private.  | 
| 2019.05.21 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2019.05.15 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2019.04.26 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2019.04.21 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2019.04.10 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2019.03.13 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2019.02.13 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) SQL 2014 with Service Pack 2 and SQL 2016 with Service Pack 1 will no longer be updated after this release.   | 
| 2019.02.09 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2019.01.10 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 

## Monthly AMI updates for 2018
<a name="amis-2018"></a>

For more information, see [Description of Software Update Services and Windows Server Update Services changes in content for 2018](https://support.microsoft.com/en-us/help/4486929/software-update-services-and-windows-server-update-services-2018) on the Microsoft website.


| Release | Changes | 
| --- | --- | 
| 2018.12.12 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2018.11.28 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2018.11.20 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2018.11.19 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2018.10.14 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) **Windows Server 2016 Datacenter and Standard Editions for Nano Server ** Microsoft ended mainstream support for Windows Server 2016 Datacenter and Standard Editions for Nano Server installation options as of April 10, 2018.  | 
| 2018.09.15 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) **Windows Server 2016 Base Nano** Access to all public versions of Windows\$1Server-2016-English-Nano-Base will be removed in September 2018. For more information about Nano Server lifecycle, including details on launching Nano Server as a Container, see [https://learn.microsoft.com/en-us/previous-versions/windows-server/it-pro/windows-server-2016/get-started/nano-in-semi-annual-channel](https://learn.microsoft.com/en-us/previous-versions/windows-server/it-pro/windows-server-2016/get-started/nano-in-semi-annual-channel) on the Microsoft website.  | 
| 2018.08.15 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) **Windows Server 2016 Base Nano** Access to all public versions of Windows\$1Server-2016-English-Nano-Base will be removed in September 2018. For more information about Nano Server lifecycle, including details on launching Nano Server as a Container, see [https://learn.microsoft.com/en-us/previous-versions/windows-server/it-pro/windows-server-2016/get-started/nano-in-semi-annual-channel](https://learn.microsoft.com/en-us/previous-versions/windows-server/it-pro/windows-server-2016/get-started/nano-in-semi-annual-channel) on the Microsoft website.  | 
| 2018.07.11 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2018.06.22 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2018.06.13 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2018.05.09 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2018.04.11 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2018.03.24 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2018.03.16 |  AWS has removed all AWS Windows AMIs dated 2018.03.16 due to an issue with an unquoted path in the configuration for the Amazon EC2 Hibernate Agent.  | 
| 2018.03.06 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2018.02.23 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2018.02.13 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2018.01.12 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2018.01.05 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 

## Monthly AMI updates for 2017
<a name="amis-2017"></a>

For more information, see [Description of Software Update Services and Windows Server Update Services changes in content for 2017](https://support.microsoft.com/en-us/help/4073007/description-of-software-update-services-and-windows-server-update-serv) on the Microsoft website.


| Release | Changes | 
| --- | --- | 
| 2017.12.13 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2017.11.29 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2017.11.19 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2017.11.18 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2017.10.13 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2017.10.04 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) Microsoft SQL Server 2017 supports the following features: [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2017.09.13 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2017.08.09 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2017.07.13 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2017.06.14 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2017.05.30 |  The Windows\$1Server-2008-SP2-English-32Bit-Base-2017.05.10 AMI was updated to the Windows\$1Server-2008-SP2-English-32Bit-Base-2017.05.30 AMI to resolve an issue with password generation.  | 
| 2017.05.22 |  The Windows\$1Server-2016-English-Full-Base-2017.05.10 AMI was updated to the Windows\$1Server-2016-English-Full-Base-2017.05.22 AMI after some log cleaning.  | 
| 2017.05.10 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2017.04.12 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2017.03.15 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2017.02.21 | Microsoft recently [announced](https://msrc.microsoft.com/blog/2017/02/february-2017-security-update-release/) that they will not release monthly patches or security updates for the month of February. All February patches and security updates will be included in the March update.Amazon Web Services did not release updated Windows Server AMIs in February.   | 
| 2017.01.11 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 

## Monthly AMI updates for 2016
<a name="amis-2016"></a>

For more information, see [Description of Software Update Services and Windows Server Update Services changes in content for 2016](https://support.microsoft.com/en-us/help/3215781/description-of-software-update-services-and-windows-server-update-serv) on the Microsoft website.


| Release | Changes | 
| --- | --- | 
| 2016.12.14 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) SQL Server 2016 SP1 is a major release. The following features, which were previously available in Enterprise edition only, are now enabled in Standard, Web, and Express editions with SQL Server 2016 SP1: [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2016.11.23 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2016.11.09 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2016.10.18 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2016.9.14 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2016.8.26 | All Windows Server 2008 R2 AMIs dated 2016.08.11 were updated to fix a known issue. New AMIs are dated 2016.08.25. | 
| 2016.8.11 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2016.8.2 |  All Windows Server 2008 R2 AMIs for July were removed and rolled back to AMIs dated 2016.06.15, because of an issue discovered in the AWS PV driver. The AWS PV driver issue has been fixed. The August AMI release will include Windows Server 2008 R2 AMIs with the fixed AWS PV driver and July/August Windows updates.  | 
| 2016.7.26 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2016.7.13 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2016.6.16 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2016.5.11 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2016.4.13 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2016.3.9 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2016.2.10 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2016.1.25 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2016.1.5 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 

## Monthly AMI updates for 2015
<a name="amis-2015"></a>

For more information, see [Description of Software Update Services and Windows Server Update Services changes in content for 2015](https://support.microsoft.com/en-us/help/3132806/description-of-software-update-services-and-windows-server-update-serv) on the Microsoft website.


| Release | Changes | 
| --- | --- | 
| 2015.12.15 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2015.11.11 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2015.10.26 |  Corrected boot volume sizes of base AMIs to be 30GB instead of 35GB  | 
| 2015.10.14 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2015.9.9 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2015.8.18 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2015.7.21 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2015.6.10 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2015.5.13 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
| 2015.04.15 |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
|  2015.03.11  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html) [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
|  2015.02.11  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 
|  2015.01.14  |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ec2-windows-ami-version-history.html)  | 