diff --git a/amazon-ec2/README b/amazon-ec2/README
index c47de370..80442d05 100644
--- a/amazon-ec2/README
+++ b/amazon-ec2/README
@@ -15,6 +15,7 @@ machine and an Amazon security access key pair created for your account.
 By default, this role does nothing (no `main.yml` file).
 
 * `create-instance.yml`: create new EC2 instances
+* `post-install.yml`: remove admin user created on Debian instances
 
 ## Variables
 
diff --git a/amazon-ec2/tasks/post-install.yml b/amazon-ec2/tasks/post-install.yml
new file mode 100644
index 00000000..369f4941
--- /dev/null
+++ b/amazon-ec2/tasks/post-install.yml
@@ -0,0 +1,5 @@
+---
+- name: Remove admin user
+  user:
+    name: admin
+    state: absent