# AMS Advanced console and Amazon EC2 access
<a name="access-how-works-prereqs"></a>

Accessing the AMS Advanced console.

![\[Relationships between AWS STS, AWS Management Console, and AMS change management APIs and various user types within your organization.\]](http://docs.aws.amazon.com/managedservices/latest/userguide/images/malz-access-cust-console.png)


Accessing your Amazon EC2 instances.

Submit access request:

![\[How your organization's users interact with your application account via AAMS change management, and with your shared service account through Management Host and Directory Service.\]](http://docs.aws.amazon.com/managedservices/latest/userguide/images/malz-access-cust-instance.png)


Logging into your AMS Amazon EC2 instances:

![\[The relationship between your organization's users, SSH/RDP bastions within your cloud shared service account, and an instance within your application account.\]](http://docs.aws.amazon.com/managedservices/latest/userguide/images/malz-access-cust-instance-logon.png)