3 ms·
The author states: >"No more bastion hosts required! Session Manager uses AWS APIs to communicate with your instances, so you can remove the administrative bur
by bogomipz 7y ago
The author states:
>"No more bastion hosts required! Session Manager uses AWS APIs to communicate with your instances, so you can remove the administrative burden of maintaining bastion hosts."
Does this presume the EC2 instances have a public IP or is there a way this would also work with EC2 instances on private subnets?
- jhinds 7y agoWe've been using the Session Manager with instances in private subnets without issue, works like a charm.
- bogomipz 7y agoIs there anything special that needs to be configured to get this to work on private subnets? Currently I have an EKS cluster accessible only on private subnets. It would be wonderful to to be able to access this without OpenVPN in the mix.
- exidy 7y agoThe instances establish an outbound connection to the API SSM API, so as long as they can hit that, Session Manager will work. Connectivity from a private subnet to the AWS API could be (a) NAT gateway (b) HTTP proxy (c) PrivateLink VPC endpoint.