News for hackers. Stuff that matters.
Re:Show HN: Tunshell – Remote shell into ephemeral environme... by mwakerman on Wednesday August 19, 2020 @08:39AM (#24209768)
Correct. It’s not always this simple though, you also need an IAM profile that the EC2 instance can assume with the required permissions. Depending on how you configure your NAT Instance/Gateway, you may also need to whitelist the ssm service.
Re:Show HN: Tunshell – Remote shell into ephemeral environme... by xomodo on Wednesday August 19, 2020 @09:11AM (#24209984)
Im using this IAM policy on ec2 instance profile: "arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore"