3 ms·
If you use SSM instead of a bastion host, how do you tunnel traffic to internal services that are not exposed to the internet?
by geunsgucndb 5y ago
If you use SSM instead of a bastion host, how do you tunnel traffic to internal services that are not exposed to the internet?
- mrweasel 5y agoI haven't actually tried it, but you can use SSM in your ssh config as a ProxyCommand. As I understand it, that will allow you to just use the ssh command as normal, with all the normal ssh abilities to do tunneling and port forwarding.
- wmfiv 5y agoYes that's right. You can use SSM to port forward. Here's an example of the SSH configuration. host i-* mi-* ProxyCommand sh -c "aws ssm start-session --target %h --document-name AWS-StartSSHSession"