Hacker News new | ask | show | jobs
by bogomipz 2287 days ago
The author states:

>"No more bastion hosts required! Session Manager uses AWS APIs to communicate with your instances, so you can remove the administrative burden of maintaining bastion hosts."

Does this presume the EC2 instances have a public IP or is there a way this would also work with EC2 instances on private subnets?
1 comments
jhinds 2287 days ago
We've been using the Session Manager with instances in private subnets without issue, works like a charm.
link
bogomipz 2287 days ago
Is there anything special that needs to be configured to get this to work on private subnets?

Currently I have an EKS cluster accessible only on private subnets. It would be wonderful to to be able to access this without OpenVPN in the mix.

link
exidy 2286 days ago
The instances establish an outbound connection to the API SSM API, so as long as they can hit that, Session Manager will work.

Connectivity from a private subnet to the AWS API could be (a) NAT gateway (b) HTTP proxy (c) PrivateLink VPC endpoint.

link