4 ms·
Hasn't this been solved by using SSH certificates instead of keys?
by tilolebo 7y ago
Hasn't this been solved by using SSH certificates instead of keys?
- bkmeneguello 7y agoI've been using SSH certificates for a while with great success. The only downside, in relation to SSM, is to have to manage your keys an CA, but it worth to avoid vendor lock-in.
- marcinzm 7y agoSSM doesn't require you to manage keys or have a bastion/vpn/public access. It'll also log access attempts, in some cases log commands, and ties into IAM permissions (ie: these people can't access prod but can access test, etc.).