2 個答案
- 最新
- 最多得票
- 最多評論
1
I advise to use Systems Manager's Sessions Manager instead of a bastion host, if possible. Read more about it here: Replacing a Bastion Host with Amazon EC2 Systems Manager.
1
Use Systems Manager Sessions Manager. Then use AAD and AWS IAM Identity Centre Permission sets (thats how I assume you are using SSO) to grant the right set of users the right set of permissions to use Sessions Manager. This will have a markedly better security posture.
https://docs.aws.amazon.com/systems-manager/latest/userguide/session-manager.html
已回答 1 年前
相關內容
- AWS 官方已更新 9 個月前
- AWS 官方已更新 2 年前
- AWS 官方已更新 1 年前
- AWS 官方已更新 2 年前