1. Upon launching the AMI several scripts will run to configure the instance. By default, it is setup to listen on ports 80 for CSE and port 8080 for the identity provider (Keycloak) using the public DNS hostname provided by AWS:

2. The instance ID will be the default password for both your keyadmin and expadmin default accounts.  Both should be reset to unique values.  When browsing to the public DNS, you will be presented with the MDACA login page: