News for hackers. Stuff that matters.

A comment on Show HN: Tunshell – Remote shell into ephemeral environments behind NAT/firewall. Parent comment

Re:Show HN: Tunshell – Remote shell into ephemeral environme... by whalesalad on Wednesday August 19, 2020 @08:26AM (#24209672)
This is a game changer. I have a bastion host in certain environments I never realized AWS has built in kit to achieve this sort of thing. I assume the key product here is SSM?
[ Parent | on HN ]
Re:Show HN: Tunshell – Remote shell into ephemeral environme... by mwakerman on Wednesday August 19, 2020 @08:39AM (#24209768)
Correct. It’s not always this simple though, you also need an IAM profile that the EC2 instance can assume with the required permissions. Depending on how you configure your NAT Instance/Gateway, you may also need to whitelist the ssm service.
[ Parent | on HN ]
Re:Show HN: Tunshell – Remote shell into ephemeral environme... by xomodo on Wednesday August 19, 2020 @09:11AM (#24209984)
Im using this IAM policy on ec2 instance profile: "arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore"
[ Parent | on HN ]