Discussion on "Users and SSH setup on AWS EC2 - Best Practices"

I have tried out the code that you have provided to Users and SSH setup on AWS EC2 and the explanation you have added really helped me a lot to understand the code mobile shop in oman that you have shared here

In a terminal window, use the ssh command to connect to the instance. You specify the path and file name of the private key ( . pem ), the user name for your instance, and the public DNS name or IPv6 address for your instance. - aws.amazon ( electricians near me )

Opened my eyes to several practices I am going to implement ASAP into my organization's policies. Thank you.

I work with many startups and sometimes I want access to their EC2 instances on AWS. When I ask, often people send me a private key (a PEM file) to login! . The best part about besant technologies is that even after completion of course they provide free technical support and they will be sending you JOB Opening Mails. trainingbangalore.in/amazon-web-services-training…

Totally waiting for another piece on IAM user role management. :D

In fact, you can already use IAM and let user manage their CodeCommit SSH key... but use that ssh-key for other purposes. I use that to make it easier : user manage their own ssh key, but the instances use iam groups to sync user with some users, and when a ssh connection needs to be established the key is read from IAM

The simple demos are available there: (for production use, you'd want to populate theses scripts from your cloudinit script, and restrict the user sync to only a specific group)

github.com/sportebois/aws-ec2-ssh-sync

HTH

Vasan Subramanian Thanks for sharing your experience. It's "Make My Day moment".

A weakness of SSH is SSH private key never expire. We can use AuthorizedKeysCommand

We can also alter ~/.authorized_keys content based on some key store. In AMI we need to configure AuthorizedKeysCommand which will run every time before public key is compared in ~/.authorized_keys and recreate ~/.authorized_keys based on user uploaded keys or admin deleted keys.

this github project have implementation github.com/widdix/aws-ec2-ssh

Discussion

Users and SSH setup on AWS EC2 - Best Practices

Responses(8)

Recent in Forum

Search Hashnode

Users and SSH setup on AWS EC2 - Best Practices

Responses(8)

Recent in Forum