By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

Unable to connect to EC2 using SSM.ap-southeast-1.amazonaws.com

0

Dear all Gurus,

I am facing some issue on EC2 connect. When I am using the viaservice condition ssm.ap-southeast-1.awazonaws.com It prompt me that I do not have permission. When I remove this condition, i can access the EC2 without any issues.

any idea that I can use other service name to limit the condition?

Thank you in advance.

Topics
Compute
Tags
Amazon EC2Session Management
Language
English
McDs23
asked a year ago255 views
2 Answers
0

What IAM policies are you actually using?

Also, are you using Systems Manager Session Manager to connect to EC2?

profile picture
EXPERT
Riku_Kobayashi
answered a year ago
  • McDs23
    a year ago

    IAM currently is full access administator. cause I am doing some testing. Yes I am using System Managers Session Manager to Connect to EC2. Currently, I need to encrypt the ssm session with kms key with viaservice or condition limited. May I know which via services or condition that I can put in for testing? TYIA

  • Riku_Kobayashi EXPERT
    a year ago

    Can you please share the IAM policy you have set up for EC2 and the full text of the connection error?

    Is the EC2 running on a private subnet? If so, are KMS VPC endpoints and NAT gateways configured?

0

IAM is full administrator rights. when i added this condition "kms:ViaService": "ssm.ap-southeast-1.amazonaws.com"

I cannot (connect) button in Connect to Instance (Session Manager), the error said that I do not have the kms:GenerateDataKey in key policy which it is in place. Once I remove this permission "kms:ViaService": "ssm.ap-southeast-1.amazonaws.com" I am able to connect to the EC2.

I am trying to limit the key usages by using the condition of via service.

McDs23
answered a year ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content