Skip to content

SSH management for multiple users

0

An EC2 instance gets created with a single SSH key. But we don't want to share this across the team.

I believe the recommendation now is to use aws ssm start-session command to securely login to the system which works well for the most part. But when we want to SCP a file from localhost to the EC2 it is a pain.

I have seen there are ways to use SSH over SSM via some temporary-copying public key to EC2 and logging in.

Are there any better alternatives?

asked 2 years ago587 views
1 Answer
1

Hello.

I have seen there are ways to use SSH over SSM via some temporary-copying public key to EC2 and logging in.

I often transfer files to EC2 this way.

Another method I have experienced in the past is to mount S3 from EC2 with "Mountpoint for Amazon S3" and have users upload files to S3.
With this method, there is no need for users to share or create SSH keys.
https://aws.amazon.com/jp/blogs/aws/mountpoint-for-amazon-s3-generally-available-and-ready-for-production-workloads/

EXPERT
answered 2 years ago
EXPERT
reviewed 2 years ago
EXPERT
reviewed 2 years ago
  • s3 mount is an interesting approach (not for this use-case specifically but i might have some use-cases for it. thanks).

    for now, i am going with SSM over SSH and then copy my ssh key once to the instance. this doesn't work as a team-wide solution. but i guess that is somewhat by design.

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.