AWS Session Manager Step by Step Tutorial: SSH | Port-Forward | Audit | Logs

▬▬▬▬▬ Experience & Location 💼 ▬▬▬▬▬
► I’m a Senior Software Engineer at Juniper Networks (12+ years of experience)
► Located in San Francisco Bay Area, CA (US citizen)

▬▬▬▬▬▬ Connect with me 👋 ▬▬▬▬▬▬

▬▬▬▬▬▬ Related videos 👨‍🏫 ▬▬▬▬▬▬

=========
⏱️TIMESTAMPS⏱️
0:00 Intro
0:27 Demo
1:30 Create IAM Role and EC2 Instance
5:15 Create CloudWatch Log Group
6:25 Install AWS Session Manager Plugin
7:29 Create IAM Policy and IAM user
9:34 SSH to EC2 Instance
12:34 Port Forward from EC2 to localhost

=========
Source Code

#AWS #SessionManager #DropBastion

[George-mklp]

videos are way better with no background music. thanks for your hard work 👏

[daniellet]

Great content and also well explained.

[DanuKurnia]

thanks for your guide, well explained ..

btw i thought you're Indonesian because of your name lol

[radzhivapasov]

Hi Anton, thank you for the video, one question, can we access instances and databases and their url’s using session manager and its not suppose to be exposed to internet!
And how many users can attempt one session in linux and windows machines.
If you know something about it pls advise

[dancummings]

Excellent. That's the clearest and cleanest security setup I've ever seen.

[letsspeakbharath]

Expecting same explanation in upcoming topics

[MuttleyGames]

9:54 This part doesn't work. You need to generate a key for developer user and save the Access key and secret access key somewhere. Then put them inside aws configure fields, otherwise you will get access denied (403) error.
Yes it took me 3-4 hours of troubleshooting..

[wisnusetiawan]

How about with github action to connect with ssm so far ?

[Sumantkrmishra]

for me i tried setting up ssm but its not working, while strating ssm not able to add instance target id.

[galeop]

How does it work under the hood ? I suppose the following :
1) the EC2 instance performs remote port forwarding with Session manager, to make one of its port (eg 80) available to Session manager through that ssh tunnel (for instance on Session Manager's port 9999).
2) the AWS CLI establishes local port forwarding with Session manager, to be able to reach locally (local port 8080) Session Manager's port 9999, which itself is mapped to EC2's port 80.
Am I correct ?

[weelaiyang]

Tried looking at the source code from the link provided via Github is not found, can you update the link?

[sairamakrishna]

Hey @Anton Putra, Can we somehow use the loadbalancer as ssm target to establish a session to one of the instance under loadbalancer ?

[pingpongkias]

Hey, is there a way for multiple port forwards in one session? For example - --parameters '{"portNumber";["80", "443"], "localPortNumber":["1000", "2000"]}' ?

[sudarshanphule]

How can we forward ssh port 22 from host to local so that we can use tools like sftp in such case when we do not have direct access to ec2 and using ssm instead?