Secure Shell Access Without SSH
summary
Argues that SSH can be replaced by AWS Systems Manager Session Manager to get shells without opening port 22 or giving instances public IPs, using the SSM agent and IAM instead of authorized_keys. Demonstrates via AWS CLI WebSocket sessions and SSM run running commands on a Raspberry Pi and a Debian VM in GCP, and a small open source toolset called SSM helpers that finds instances across accounts/regions and starts synchronized shells. Shows port forwarding and session recording work, SCP support pending.
AI-written summary · about
chapters (16)
- 0:00Intro
- 1:00Getting from A to B
- 13:05Demo
- 14:16Session Manager
- 22:27Cloud Native
- 23:23SSM helpers
- 24:19What should listeners learn
- 24:55Google Cloud Shell
- 25:53Overlay Networks
- 26:10SSH
- 27:32Inlets
- 27:54Proxy Commands
- 30:11Tunnel SSH
- 31:25Future of Systems Manager
- 33:19Cloud Native Infrastructure
- 34:52How to Run Infrastructure
related talks
46mHardening AWS Environments and Automating Incident Response for AWS Compromises
25mBash-my-AWS: CLI commands for managing AWS resources
52mRemoting evolving - SSH
35mSecure Remote Access for Hybrid Workforce on AWS
47mBringing a Machete to the Amazon
45mZero Trust SSH
43mThink like a HACKER
56mPivoting in Amazon Clouds