News for hackers. Stuff that matters.

A comment on AWS Session Manager: less infrastructure, more features.

Re:AWS Session Manager: less infrastructure, more features by derefr on Monday March 16, 2020 @11:34AM (#22593562)
Are they basically trying to emulate GCP’s OS Login (https://cloud.google.com/compute/docs/instances/managing-ins...) feature here? We’ve been using that for a while, and it’s been a big relief.
[ Parent | on HN ]
Re:AWS Session Manager: less infrastructure, more features by hexadec on Monday March 16, 2020 @01:49PM (#22595246)
It seems like a re-implementation of cloud shell for Azure (https://docs.microsoft.com/en-us/azure/cloud-shell/overview). It also uses the browser and native IAM, but you can use the native AD integration and JIT permissions.

But it seems no one like Azure these days, but they have some nifty features.

[ Parent | on HN ]
Re:AWS Session Manager: less infrastructure, more features by idunno246 on Monday March 16, 2020 @12:47PM (#22594329)
os login is probably a little closer to ec2 instance connect because you still need ssh inbound access right? whereas aws provides a bastion here
[ Parent | on HN ]
Re:AWS Session Manager: less infrastructure, more features by aPoCoMiLogin on Monday March 16, 2020 @01:05PM (#22594585)
There is a proxy called IAP [1] which is used to create SSH tunnel over HTTPS to instances without public IP.

[1] https://cloud.google.com/compute/docs/instances/connecting-a...

[ Parent | on HN ]
Re:AWS Session Manager: less infrastructure, more features by WaxProlix on Monday March 16, 2020 @01:05PM (#22594591)
You're right in a sense, but there's no aws-managed bastion. Session manager communicates with your instance via an outbound-created websocket connection. Inputs and outputs are piped through it.
[ Parent | on HN ]
Re:AWS Session Manager: less infrastructure, more features by idunno246 on Monday March 16, 2020 @01:30PM (#22594978)
yea, i was trying to keep things simplified, but it has to proxy through something behind the vpc endpoint. could also say its not technically ssh
[ Parent | on HN ]
Re:AWS Session Manager: less infrastructure, more features by zokier on Monday March 16, 2020 @03:36PM (#22596666)
Though you can actually get ssh through ssm: https://docs.aws.amazon.com/systems-manager/latest/userguide...
[ Parent | on HN ]
Re:AWS Session Manager: less infrastructure, more features by jon918 on Monday March 16, 2020 @11:57AM (#22593730)
Yeah, this is the same deal. Session Manager will log your sessions which is pretty cool.
[ Parent | on HN ]