DBeaver Ultimate Deployment in AWS

Table of contents

• Prerequisites
• Launch an instance
  • Find DBeaver Ultimate for AWS in AWS Marketplace
  • Subscribe and launch
  • Configure the instance
  • Configure security group
  • Configure AWS access
  • Launch instance
• Connect to the instance
  • Get the password
  • Connect via RDP

DBeaver Ultimate for AWS runs as a preconfigured EC2 instance. You don’t install it manually. You launch an instance from AWS Marketplace and connect to it.

After setup, you can work with AWS databases and S3. See Cloud Explorer and Cloud Storage.

Note: This guide focuses on Windows-based images with RDP access.

Prerequisites

Make sure you have:

• an AWS account
• permissions to launch EC2 instances
• access to AWS Marketplace

Launch an instance

Find DBeaver Ultimate for AWS in AWS Marketplace

Open the images in AWS Marketplace:

• Windows-based image
• Linux-based image

Alternatively, search for the AMI in AWS:

1. Select the AWS region where you want to run the instance.
2. Open AWS -> EC2.
3. Go to AMI Catalog.
4. Select AWS Marketplace AMIs.
5. Search for DBeaver.

Subscribe and launch

1. On the image page, click Subscribe now.
2. Click Launch instance with AMI.

Configure the instance

Set basic parameters:

• Name - any value.
• Instance type - m5.large (recommended minimum for optimal performance) or higher.
• Key pair - required for RDP access. If you don't have one, create a new key pair in the EC2 console.

Tip: You'll need the private key file (.pem or .ppk) later to decrypt the RDP password for the Administrator account.

Configure security group

Set up a security group.

Allow inbound access:

• RDP (port 3389) - required to connect to the instance
• SSH (port 22) - used for system access and troubleshooting

For information on configuring security groups, see Amazon EC2 security groups for your EC2 instances

Important: Restrict access to your IP. Don’t allow 0.0.0.0/0.

Configure AWS access

Grant access to AWS services during instance setup.

What this enables:

• discover cloud databases in Cloud Explorer
• browse S3 in Cloud Storage

In the Advanced details section, select an IAM instance profile.

The instance profile contains an IAM role that defines access to AWS services like S3 and RDS.

This allows DBeaver to access AWS resources without manually configuring credentials.

Tip: If you don’t select a role here, you can attach it later.

Make sure the role includes the required permissions:

• AmazonS3ReadOnlyAccess - access S3 in Cloud Storage
• permissions for RDS, Redshift, Athena, and others - discover databases in Cloud Explorer

For information on creating IAM roles, see Creating a role for an AWS service.

Launch instance

Click Launch instance and wait until it is ready. Instances may take a few minutes to initialize.

Tip: Wait until the instance status is Running before connecting.

Connect to the instance

After launching, AWS shows a Success message with a link to your instance.

1. Click it to open the instance details page.
2. Click Connect.
3. Select the RDP client tab.

You'll see:

• public DNS
• username (Administrator)

Get the password

1. Click Get password.
2. Upload your private key.
3. Decrypt the password.

For detailed steps, see Get the administrator password for your instance.

Connect via RDP

Use any RDP client:

• Windows Remote Desktop
• Microsoft Remote Desktop (macOS)
• Remmina (Linux)

Enter:

• Host - public DNS
• Username - Administrator
• Password - decrypted password

After login, DBeaver starts automatically on the instance.