AWS EC2 Instance Connect

AWS EC2 Instance Connect (Jun 2019)

• https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Connect-using-EC2-Instance-Connect.html

Features:

• Allow use of AWS Identity and Access Management (IAM) policies and principals to control SSH access to your instances.
• one-time-use SSH public key to the instance metadata where it remains for 60 seconds

Suported by default in AMIs:

• Amazon Linux 2 2.0.20190618 or later
• Ubuntu 20.04 or later

Commands:

• aws ec2-instance-connect ssh
• aws ec2-instance-connect
• aws ec2-instance-connect send-ssh-public-key

• Terraform resource: aws_ec2_instance_connect_endpoint

Related

• AuthorizedKeysCommand, AuthorizedKeysCommandUser
• OpenSSH
• IAM roles for EC2 instances
• key_name in aws_instance Terraform resource
• aws_key_pair Terraform resource
• ec2:CreateInstanceConnectEndpoint
• ansible-eci-connector

See also

• ECI
• AWS EC2, Amazon EC2 API, aws ec2, AWS::EC2, Amazon EC2 Spot Instances, CPU credits, Instance type, EC2 limitations, 169.254.169.254, Instance metadata and user data (IMDS), InstanceType, InstanceId, Amazon EC2 Auto Scaling, AWS EC2 Instance Connect, launch template, lifecycle, AWS Security group (SG), Amazon EC2 Recycle Bin, Amazon EC2 Mac Instances, Global View, Instance status check failed, EC2 Serial Console, Default Host Management Configuration (DHMC), Bare Metal, managed instances

https://aws.amazon.com/about-aws/whats-new/2019/06/introducing-amazon-ec2-instance-connect/