Overview
Now with AWS SSO, SAML 2.0 and Cognito integration for Single-Sign on!
Guacamole is a browser based remote access tool that provides easy access to hosts in all your VPCs, across accounts and regions. Access to Windows desktops (RDP), Linux terminals (SSH) and Kubernetes Pods is supported. No client software needed, a modern browser is all you need. This also enables administrators in corporate environments behind restrictive proxies to access remote servers on AWS.
This product ships with version 1.5.5 of the popular open-source HTML5 RDP and SSH client Apache Guacamole and GuAWS, an agent that queries your AWS environment to automatically discover running instances.
GuAWS is continuously scanning your VPC for new instances using the AWS API. It also scans across VPC, account and regional boundaries where VPC Transit Gateways or VPC Peering Connections are used. Your servers are organized by VPC and security group which makes it easy to find the right instance and manage access. Additionally, connections opened by users are logged to CloudWatch Logs.
A user management system provides fine grained access control to individual groups or instances. Single sign-on authentication can easily be added through Amazon Cognito or other OpenID compliant providers such as Auth0, Okta or Duo. Multi-Factor authentication is provided by the built-in TOTP plugin that works with Google Authenticator or similar apps. Follow the Setup Instructions link in the sidebar for additional details.
Highlights
- AUTO DISCOVERY: Automatically discovers new resources in all your VPCs, cross-region, cross-account.
- AUDIT LOGS: Every connection is logged to CloudWatch Logs for traceability and audit needs.
- SINGLE SIGN-ON AND MFA: Enable Multi-Factor Authentication and Single Sign-On for a seamless and secure user experience.
Details
Unlock automation with AI agent solutions

Features and programs
Financing for AWS Marketplace purchases
Pricing
Free trial
- ...
Dimension | Cost/hour |
---|---|
m5n.large Recommended | $0.08 |
m5.4xlarge | $0.46 |
m4.4xlarge | $0.499 |
r5.24xlarge | $2.66 |
r5.large | $0.092 |
r3.xlarge | $0.192 |
m3.large | $0.087 |
r5a.xlarge | $0.14 |
t2.xlarge | $0.119 |
r5n.2xlarge | $0.25 |
Vendor refund policy
We do not currently support refunds, but you can cancel at any time.
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Please find the release notes at https://docs.netcubed.io/products/guacamole/release-notes/#300Â
Additional details
Usage instructions
Access the application via a browser at https://[public_dns]/. The default user is guacadmin, the default password is the instance ID.
Most browsers will display a certificate warning. This warning is letting you know that the certificate was self-signed instead of signed by a trusted Certificate Authority. You can safely ignore the warning as it doesn't impact the security of the connection by clicking on "Continue to this webpage" (Internet Explorer) or "Advanced" and then "Proceed to website" (Chrome).
To connect to the underlying operating system of the EC2 instance connect via SSH with the username ec2-user.
Resources
Support
Vendor support
For paid support, email sales@netcubed.de for further information. Free support is provided via support@netcubed.de . For free support, we do not provide a guaranteed response time, however we do our best to respond to questions within one business day.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.

Standard contract
Customer reviews
Secure access is simplified with easy login for virtual machines
What is our primary use case?
I am provisioning virtual machines for educational institutions such as schools and colleges. The access to these virtual machines is provided via Apache Guacamole .
What is most valuable?
Apache Guacamole is really easy to use. If I have ten virtual machines provisioned under my name, I can access them with a single login for each virtual machine with their respective credentials. Security concerns are addressed with separate logins for each virtual machine, ensuring complete security.
What needs improvement?
There should be good documentation regarding GUI customization. Even though I can try customizing the GUI, the documentation is not comprehensive.
For how long have I used the solution?
I have been using Apache Guacamole for approximately two years.
What do I think about the stability of the solution?
It is stable enough. The only requirement is to have good internet connectivity for stable access.
What do I think about the scalability of the solution?
Its scalability depends on the cloud. If the cloud is scalable, the virtual machines are scalable as well. In case of failures, the system can autoscale to other virtual machines.
How are customer service and support?
Apache has community support. Since I did not face significant issues, I haven't needed to reach out to them.
How would you rate customer service and support?
Positive
How was the initial setup?
The setup was easy and would take just about half an hour to complete the deployment.
What's my experience with pricing, setup cost, and licensing?
It is completely free of charge as it is an open-source solution.
What other advice do I have?
For those considering using Apache Guacamole, I wholeheartedly support its users since it's a free open-source software that is easy to download and use with no significant issues.Â
Overall, I rate Apache Guacamole a nine out of ten.
Which deployment model are you using for this solution?
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Fantastic customer support
The customer support was very quickly and fixed our issue in less than 10 minutes. Thanks to Moritz Onken for helping
A stable and open-source solution that can be used as a gateway
What is most valuable?
I'm using Apache Guacamole as a gateway.
What needs improvement?
The solution's USB redirection could be improved. If the machine has a USB port, I'm not able to redirect it.
The solution should include FX protocol instead of RDP.
For how long have I used the solution?
I have been using Apache Guacamole for five to six years.
What do I think about the stability of the solution?
Apache Guacamole is a pretty stable solution.
What do I think about the scalability of the solution?
Around 25 to 30 users are using Apache Guacamole in our organization.
Which solution did I use previously and why did I switch?
We previously used Citrix and decided to switch to Apache Guacamole because it's a free, open-source solution.
What other advice do I have?
We are using the latest version of Apache Guacamole. Only one administrator is required to manage the solution.
Overall, I rate Apache Guacamole eight and a half out of ten.
Awesome inbuilt Guacamole setup within AMI
This is one of the cool AMI to use for the Guacamole Application Deployment.
The NetCUBED engineers are simply awesome. Whenever the customer needs their assistance then customer can receive the response instantly.
Thanks,
Sanjeevi Mahalingam
Could not log into EC2 instance in private subnet
I wrote a simple user-data start-up script to
1) Set "PasswordAuthentication yes" (this seemed to work)
2) Set password for ec2-user. This password followed standard EC2 instance password policy.
3) These commands were issued as su
4) To be sure that my script was 100% correct, I ran similar commands to change/set the password and set "PasswordAuthentication yes" on my stand-alone Linux (Ubuntu) machine. Both the commands worked perfectly as expected
With my (small) instance charges running high for test/trail purpose, having made many attempts with many permutations with no visibility into start-up (error/failure) log and with my Guacamole Bastion's trail period coming to an end within a day, I though that it would be best to cancel this subscription.