# AMS Advanced console and Amazon EC2 access
<a name="access-how-works-prereqs"></a>

Accessing the AMS Advanced console.

![Relationships between AWS STS, AWS Management Console, and AMS change management APIs and various user types within your organization.](http://docs.aws.amazon.com/managedservices/latest/userguide/images/malz-access-cust-console.png)


Accessing your Amazon EC2 instances.

Submit access request:

![How your organization's users interact with your application account via AAMS change management, and with your shared service account through Management Host and Directory Service.](http://docs.aws.amazon.com/managedservices/latest/userguide/images/malz-access-cust-instance.png)


Logging into your AMS Amazon EC2 instances:

![The relationship between your organization's users, SSH/RDP bastions within your cloud shared service account, and an instance within your application account.](http://docs.aws.amazon.com/managedservices/latest/userguide/images/malz-access-cust-instance-logon.png)