Created an instance to demo content to prospective client - Help creating client temporary login credentials.

Question

As the title suggests, I wish to allow a prospective client access to an instance, in order to showcase the content ,then later allow them long term access to the same  instance.

I have tried creating a new user and had an issue finding which security policy to set ,as none seemed specific  to just allowing login to that one instance.

Apricate some direction.

Thanks in advance

Answer

Hi.

Have you seen the topic "Add or remove a public key on your instance" in the EC2 User Guide? You can find it at this link:
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/replacing-key-pair.html

It explains how to add a different public key on your EC2 instance, and then share the matching private key with someone who needs to connect to the instance. You can then remove the public key when you no longer want to allow that person to connect to the instance.

Another option is to use EC2 Instance Connect. You can read about EC2 Instance Connect at this link: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Connect-using-EC2-Instance-Connect.html

With EC2 Instance Connect, you can create an IAM policy that you attach to an IAM user. The policy will specify that the action to connect using EC2 Instance Connect is only allowed for the specified instance. You can find the information for setting this up in the link shared above.

I hope this helps!

Kind regards,

Marilyn

AWS

Answer

Hope your use-case is specific to provision access to an EC2 instance, you could explore SystemsManager-SessionManager.

https://docs.aws.amazon.com/systems-manager/latest/userguide/session-manager.html

You could limit access to instances, if your use-case needs clients only access data and not the instance. There are several different ways to approach this based on the use-case.

Created an instance to demo content to prospective client - Help creating client temporary login credentials.

Relevant content