> For the complete documentation index, see [llms.txt](https://docs.rumi.systems/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.rumi.systems/rumi-cli/commands/cloud/aws/launch-admin.md).

# launch-admin

Provision and start the Admin service.

## Syntax

```bash
rumi cloud aws launch-admin \
  --profile <profile> \
  --network <network> \
  --key-pair <keypair> \
  [options]
```

## Options

| Option                     | Short | Description                                                                                                                                | Default        |
| -------------------------- | ----- | ------------------------------------------------------------------------------------------------------------------------------------------ | -------------- |
| `--profile`                | `-p`  | AWS profile to use                                                                                                                         | Required       |
| `--region`                 | `-r`  | AWS region                                                                                                                                 | `us-east-1`    |
| `--network`                | `-n`  | Name of the Rumi network                                                                                                                   | Required       |
| `--key-pair`               | `-k`  | The network's EC2 key pair                                                                                                                 | Required       |
| `--admin-proxy-server`     | `-a`  | The admin proxy server (nginx `server_name` on the bastion)                                                                                | `null`         |
| `--admin-proxy-port`       | `-b`  | The admin proxy port the bastion's nginx listens on                                                                                        | `0` (no proxy) |
| `--discovery-proxy-server` | `-c`  | The discovery proxy server (nginx `server_name` on the bastion)                                                                            | `null`         |
| `--discovery-proxy-port`   | `-d`  | The discovery proxy port the bastion's nginx listens on                                                                                    | `0` (no proxy) |
| `--instance-profile`       | `-I`  | The IAM instance profile (name or ARN) to attach; required (granting the SSM managed policy) when the network's access method is `ssm-all` | `null`         |
| `--proxy-bastion`          | `-P`  | The name of the bastion that fronts the admin UI proxy; required in a multi-bastion network, omitted in a single-bastion network           | none           |

## Example

```bash
rumi cloud aws launch-admin \
  --profile my-aws-profile \
  --network my-network \
  --key-pair my-keypair
```

## Notes

* Proxy ports recorded here are opened later for specific source CIDRs with the [whitelist](/rumi-cli/commands/cloud/aws/whitelist.md) command.

## See Also

* [start-admin](/rumi-cli/commands/cloud/aws/start-admin.md)
* [stop-admin](/rumi-cli/commands/cloud/aws/stop-admin.md)
* [terminate-admin](/rumi-cli/commands/cloud/aws/terminate-admin.md)
* [run-admin-script](/rumi-cli/commands/cloud/aws/run-admin-script.md)