News for hackers. Stuff that matters.

A comment on AWS Session Manager: less infrastructure, more features. Parent comment

Re:AWS Session Manager: less infrastructure, more features by idunno246 on Monday March 16, 2020 @12:47PM (#22594329)
os login is probably a little closer to ec2 instance connect because you still need ssh inbound access right? whereas aws provides a bastion here
[ Parent | on HN ]
Re:AWS Session Manager: less infrastructure, more features by aPoCoMiLogin on Monday March 16, 2020 @01:05PM (#22594585)
There is a proxy called IAP [1] which is used to create SSH tunnel over HTTPS to instances without public IP.

[1] https://cloud.google.com/compute/docs/instances/connecting-a...

[ Parent | on HN ]
Re:AWS Session Manager: less infrastructure, more features by WaxProlix on Monday March 16, 2020 @01:05PM (#22594591)
You're right in a sense, but there's no aws-managed bastion. Session manager communicates with your instance via an outbound-created websocket connection. Inputs and outputs are piped through it.
[ Parent | on HN ]
Re:AWS Session Manager: less infrastructure, more features by idunno246 on Monday March 16, 2020 @01:30PM (#22594978)
yea, i was trying to keep things simplified, but it has to proxy through something behind the vpc endpoint. could also say its not technically ssh
[ Parent | on HN ]
Re:AWS Session Manager: less infrastructure, more features by zokier on Monday March 16, 2020 @03:36PM (#22596666)
Though you can actually get ssh through ssm: https://docs.aws.amazon.com/systems-manager/latest/userguide...
[ Parent | on HN ]