I haven't actually tried it, but you can use SSM in your ssh config as a ProxyCo... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

mrweasel on Jan 14, 2022 | parent | context | favorite | on: SSH Bastion Host Best Practices

I haven't actually tried it, but you can use SSM in your ssh config as a ProxyCommand. As I understand it, that will allow you to just use the ssh command as normal, with all the normal ssh abilities to do tunneling and port forwarding.

wmfiv on Jan 14, 2022 [–]

Yes that's right. You can use SSM to port forward. Here's an example of the SSH configuration.

host i-* mi-*

    ProxyCommand sh -c "aws ssm start-session --target %h --document-name AWS-StartSSHSession"

Consider applying for YC's Spring batch! Applications are open till Feb 11.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact