4 ms·
os login is probably a little closer to ec2 instance connect because you still need ssh inbound access right? whereas aws provides a bastion here
by idunno246 7y ago
os login is probably a little closer to ec2 instance connect because you still need ssh inbound access right? whereas aws provides a bastion here
- aPoCoMiLogin 7y agoThere is a proxy called IAP [1] which is used to create SSH tunnel over HTTPS to instances without public IP. [1] https://cloud.google.com/compute/docs/instances/connecting-advanced#cloud_iap https://cloud.google.com/compute/docs/instances/connecting-a...
- WaxProlix 7y agoYou're right in a sense, but there's no aws-managed bastion. Session manager communicates with your instance via an outbound-created websocket connection. Inputs and outputs are piped through it.
- idunno246 7y agoyea, i was trying to keep things simplified, but it has to proxy through something behind the vpc endpoint. could also say its not technically ssh
- zokier 7y agoThough you can actually get ssh through ssm: https://docs.aws.amazon.com/systems-manager/latest/userguide/session-manager-getting-started-enable-ssh-connections.html https://docs.aws.amazon.com/systems-manager/latest/userguide...