[sjellis]

PSA: If you are using AWS, you should be using Session Manager for remote access to your EC2 instances if possible - it is free and trivial to enable. Azure offers Azure Bastion, which is exactly what it says. Both of these can keep hostile SSH connections completely away from your servers, and also help to aggregate access logs.

[throwawaaarrgh]

iirc you cannot handle multiple separate user accounts with limited privileges on a server with AWS SSM SM, has that changed?