At work I have an access tool for writing automation on groups of servers. Basically orchestration without a server. I used to be SSH only, but the framework i

At work I have an access tool for writing automation on groups of servers. Basically orchestration without a server. I used to be SSH only, but the framework is built around simply delivering CLI commands and enabling file transfer. So I abstracted the command request/response and now I can do it over AWS-SSM, or docker run, kubectl, salt daemon, teleport, or even AWS-SSM to a "bastion" and then ssh from there. AWS-SSM is basically a polling mechanism, you can easily roll one of your own. What I don't like is two factor authentications that require manual steps. Then you can't automate anything.