> Annoyingly SSM still requires managing ssh keys and users somehow No, doesn't require managing ssh keys. SSM can work with SSH keys but it's not required. Th

> Annoyingly SSM still requires managing ssh keys and users somehow No, doesn't require managing ssh keys. SSM can work with SSH keys but it's not required. The downside I found is that all users connect with the same uid/gid which does not work great for bastion hosts where user profiles are required (e.g. connect to EKS API). You could work your way around this with documents permissions per user, but it's not great. The user management is handled by IAM.