[throwawaaarrgh]

Last I recall, SSMSM gives users root or ec2-user access on the instance? Or does it create new users?

[scarface74]

I haven’t thought about this. But I did find this.

https://medium.com/@unruly_mood/aws-ssm-sessions-root-non-ro...

[throwawaaarrgh]

So this is the basic problem: it doesn't give strong isolation for many users. Something like goteleport.com is better if you need lots of people to remote into random machines.