In my case it was because the instance was in a private subnet. After creating a new instance in a public subnet, I could RDP in.