Is session-manager-plugin being maintained?

0

It looks like the ssm-manager-login repo has had a drop off of activity.

As this plugin is a security-relevant tool, the lack of maintenance is concerning and calls into question the integrity of AWS security itself. Some of the reported issues require users to use less secure workarounds.

Is this utility still being maintained? What is the plan to address these issues?

1 Answer
0

Based on the information available in the official AWS documentation, it appears that the Session Manager plugin is still being actively maintained and updated by AWS. The release history shows regular updates and improvements to the plugin, with the most recent documented version being 1.2.295.0, released on January 12, 2022. This version included bug fixes for issues related to hung sessions and incorrect logs.

However, it's important to note that the release history provided in the official documentation may not be completely up-to-date. The concerns you've raised about the GitHub repository activity and open issues are not addressed in the official AWS documentation I have access to.

Regarding the use of AWS SDK for Go v1, which you mentioned is approaching end of support, the documentation does indicate that there was an upgrade to the latest version of aws-sdk-go (v1.40.17) in version 1.2.245.0 released on August 19, 2021. This upgrade was done to support AWS IAM Identity Center. However, the documentation doesn't mention any plans for migrating to AWS SDK for Go v2.

As for the specific issues and pull requests you've mentioned, or the apparent lack of recent activity on the GitHub repository, I don't have any information from official AWS sources to confirm or address these concerns. The documentation I have access to doesn't provide insights into AWS's plans for addressing these issues or the future maintenance strategy for the Session Manager plugin.

Given the importance of this tool for secure access to AWS resources, it would be advisable to reach out to AWS Support directly for the most up-to-date and accurate information about the maintenance status and future plans for the Session Manager plugin. They would be best positioned to address your concerns about ongoing maintenance, open issues, and plans for addressing potential security implications.
Sources
Session Manager plugin latest version and release history - AWS Systems Manager
Install the Session Manager plugin on macOS - AWS Systems Manager

profile picture
answered 2 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions