Cisco Catalyst SD-WAN Onboarding Guide, Releases 26.x and Later

PDF

Installing Cisco SD-WAN Control Components in AWS

Updated: July 7, 2026

Want to summarize with AI?

Log in

This topic explains how to deploy SD-WAN Control Components in AWS, including supported images, deployment considerations, and support guidelines for Cisco SD-WAN controllers in the Amazon Web Services environment.

The SD-WAN Control Components are parts of the SD-WAN fabric that consist of SD-WAN Manager, SD-WAN Controller, and SD-WAN Validator. These components are installed in an Amazon Web Services (AWS) environment using Amazon Machine Images (AMI).

We provide AMI for installing SD-WAN Control Components only for you. Do not share them with others.

Considerations before installing SD-WAN Control Components in AWS

Before installing SD-WAN Control Components in AWS, review these considerations and support guidelines:

  • Ensure minimum controller image versions are Cisco SD-WAN Manager Release 20.6.1, Cisco Controller Release 20.6.1, and Cisco Validator Release 20.6.1.

  • Cisco Catalyst SD-WAN controller AMIs are not available on the Cisco software download site or AWS marketplace. They are provided only upon request with a valid business case to set up SD-WAN Control Components in your AWS cloud account.

  • For information about ordering SD-WAN Control Components to use with AWS, contact your Cisco account team or Cisco partner.

  • We do not provide support for any issues that arise with the cloud infrastructure during the provisioning or installation of the controllers.

  • Troubleshooting:

    • Functionality issues: Open a Cisco TAC case for functionality issues.

    • Infrastructure issues: You are responsible for infrastructure management, monitoring, and troubleshooting. After the controllers are provisioned and running in your cloud account, Cisco does not provide support for cloud infrastructure-related issues.

  • Software upgrade: Controller software upgrade does not require AMI images. You can download the controller images from the Cisco software download site and upgrade the controller software as described in the Manage Software Upgrade and Repository chapter of the Cisco Catalyst SD-WAN Monitor and Maintain Configuration Guide .

The illustration below shows the architecture of the AWS region, virtual private cloud (VPC), security group, and so on, and it shows where the SD-WAN Control Components function within the architecture.

Figure 1. SD-WAN Control Components in AWS
Architecture of the AWS region, virtual private cloud, security group.

When you order the customer hosted deployment option of SD-WAN Control Components, ensure you included all types of control components you need for your SD-WAN deployment (SD-WAN Manager, SD-WAN Controller, and SD-WAN Validator). The Cisco Cloud Infrastructure team only shares the AMI(s) for your ordered control component(s).

After you receive the AMI(s), you can copy or move between regions and different AWS accounts that you own. After the initial deployment of SD-WAN Control Components, you are responsible for managing all subsequent upgrades or downgrades.

Benefits of deploying SD-WAN Control Components in AWS

  • Set-up cost: Low initial set-up cost, as compared with on-premises hosting, as there is no requirement to purchase additional data center infrastructure.

  • Deployment: Ease of cloud-based deployment.

  • Management: Ability to manage devices worldwide.

  • Stability: Because of its reliability, AWS hosting provides a stable environment for Cisco SD-WAN Controllers.

  • Security: AWS provides a secure hosting environment.

  • Scaling: AWS provides an easy path to increase the scale of your Cisco Catalyst SD-WAN network.