2 réponses
- Le plus récent
- Le plus de votes
- La plupart des commentaires
1
You don't need to define any inbound rules in the security group. The SSM agent initiates the communication with the service so you only need TCP port 443 open on the outbound as security groups are stateful. You can also use VPC Endpoints within the VPC to communicate with the SSM services. See: Step 4: Create VPC endpoints.
1
Adding inbound rules to the security group associated with the EC2 managed by Systems Manager is not necessary.
No additional inbound rules are required in the security group created for the EC2 instances in the private subnets.
répondu il y a un an
Thank you!
Contenus pertinents
- demandé il y a un an
- demandé il y a 2 mois
- demandé il y a 4 mois
AWS OFFICIELA mis à jour il y a un an- AWS OFFICIELA mis à jour il y a 2 ans
- AWS OFFICIELA mis à jour il y a un an
Thank you!