> For the complete documentation index, see [llms.txt](https://docs.rumi.systems/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.rumi.systems/rumi-cli/commands/cloud/aws/launch-platform.md).

# launch-platform

Single-bastion convenience: launches the lone jump-capable bastion plus Admin and Monitor, all proxying through that one bastion, with one instance profile for the whole platform. Requires a single-bastion network.

## Syntax

```bash
rumi cloud aws launch-platform \
  --profile <profile> \
  --network <network> \
  --key-pair <keypair> \
  [options]
```

## Options

| Option                     | Short | Description                                                                                                                                                                                                       | Default        |
| -------------------------- | ----- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------- |
| `--profile`                | `-p`  | AWS profile to use                                                                                                                                                                                                | Required       |
| `--region`                 | `-r`  | AWS region                                                                                                                                                                                                        | `us-east-1`    |
| `--network`                | `-n`  | Name of the Rumi network                                                                                                                                                                                          | Required       |
| `--key-pair`               | `-k`  | The network's EC2 key pair                                                                                                                                                                                        | Required       |
| `--admin-proxy-server`     | `-a`  | The admin proxy server (nginx `server_name` on the bastion)                                                                                                                                                       | `null`         |
| `--admin-proxy-port`       | `-b`  | The admin proxy port the bastion's nginx listens on                                                                                                                                                               | `0` (no proxy) |
| `--discovery-proxy-server` | `-c`  | The discovery proxy server (nginx `server_name` on the bastion)                                                                                                                                                   | `null`         |
| `--discovery-proxy-port`   | `-d`  | The discovery proxy port the bastion's nginx listens on                                                                                                                                                           | `0` (no proxy) |
| `--monitor-proxy-server`   | `-e`  | The monitor proxy server (nginx `server_name` on the bastion)                                                                                                                                                     | `null`         |
| `--monitor-proxy-port`     | `-f`  | The monitor proxy port the bastion's nginx listens on                                                                                                                                                             | `0` (no proxy) |
| `--instance-profile`       | `-I`  | The IAM instance profile (name or ARN) attached to every platform instance; required (granting the SSM managed policy) when the network's access method is `ssm-bastion` (for the bastion) or `ssm-all` (for all) | `null`         |

## Example

```bash
rumi cloud aws launch-platform \
  --profile my-aws-profile \
  --network my-network \
  --key-pair my-keypair
```

## Notes

* For multi-bastion topologies or per-service proxy-bastion routing, use [launch-bastion](/rumi-cli/commands/cloud/aws/launch-bastion.md) plus [launch-admin](/rumi-cli/commands/cloud/aws/launch-admin.md) / [launch-monitor](/rumi-cli/commands/cloud/aws/launch-monitor.md).

## See Also

* [start-platform](/rumi-cli/commands/cloud/aws/start-platform.md)
* [stop-platform](/rumi-cli/commands/cloud/aws/stop-platform.md)
* [terminate-platform](/rumi-cli/commands/cloud/aws/terminate-platform.md)