3 ms·

Looks like yes. Here are two blog posts about it. I'm still not clear on the difference. https://carriagereturn.nl/aws/ec2/ssh/connect/ssm/2019/07/26/connect.h

• rescbr 6y ago
  SSM connects to the instance through the agent (you're logged in as ssm-user) so you don't need to open port 22 inbound, while Instance Connect does the public key magic and connects you directly over SSH. From EC2 Instance Connect docs: "[...] it generates a one-time-use SSH public key, pushes the key to the instance where it remains for 60 seconds, and connects the user to the instance. You can use basic SSH/SFTP commands with the Instance Connect CLI." Disclaimer: I'm a SA at AWS.