|
7 | 7 | * Ensure Your IAM Permissions |
8 | 8 | * [IAM Policy Example](aws-ssm-ec2-proxy-command-iam-policy.json) |
9 | 9 | * `ssm:StartSession` for DocumentName: `AWS-StartSSHSession` and Target Instance |
10 | | - * [AWS DOcumentation](https://docs.aws.amazon.com/systems-manager/latest/userguide/getting-started-restrict-access-examples.html) |
| 10 | + * [AWS Documentation](https://docs.aws.amazon.com/systems-manager/latest/userguide/getting-started-restrict-access-examples.html) |
11 | 11 | * `ssm:SendCommand` for DocumentName: `AWS-RunShellScript` and Target Instance |
12 | | - * [AWS DOcumentation](https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-rc-setting-up.html) |
| 12 | + * [AWS Documentation](https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-rc-setting-up.html) |
13 | 13 | * Target Instance Setup |
14 | 14 | * [Ensure SSM Permissions](https://docs.aws.amazon.com/systems-manager/latest/userguide/setup-instance-profile.html) fo Target Instance Profile |
15 | 15 | * Ensure SSM Agent is installed (preinstalled on all AWS Linux AMIs already) |
|
37 | 37 | * If default region does not match instance region you need to provide it like this |
38 | 38 | * `AWS_PROFILE='default' ssh <INSTACEC_USER>@<INSTANCE_ID>--<INSTANCE_REGION>` |
39 | 39 |
|
40 | | -## TODO |
41 | | -Add variant to send ssh key by ec2-instance-connect:SendSSHPublicKey |
42 | | -* https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-connect-set-up.html |
| 40 | +## Alternative Implementation with `ec2-instance-connect` |
| 41 | +* Ensure [Prerequisits](#prerequisits) |
| 42 | +* Use [aws-ssm-ec2-proxy-command--ec2-instance-connect.sh](aws-ssm-ec2-proxy-command--ec2-instance-connect.sh) proxy command script instead |
| 43 | +* Use this [IAM Policy Example](aws-ssm-ec2-proxy-command-iam-policy--ec2-instance-connect.json) instead |
| 44 | + * `ssm:StartSession` for DocumentName: `AWS-StartSSHSession` and Target Instance |
| 45 | + * [AWS Documentation](https://docs.aws.amazon.com/systems-manager/latest/userguide/getting-started-restrict-access-examples.html) |
| 46 | + * `ec2-instance-connect:SendSSHPublicKey` for Target Instance and `ec2:DescribeInstances` |
| 47 | + * [AWS Documentation](https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-rc-setting-up.html) |
| 48 | +* Follow [Install Guide](#install-ssh-proxy-command) |
0 commit comments