EC2 via Systems Manager Agent (SSM)

Apono AWS EC2 Integration utilizes SSM (System Manager) Agent to for JIT access management for AWS VMs

πŸ“˜

Have you connected an AWS account?

Make sure you integrated your AWS account to Apono. Follow this AWS Integration step-by-step guide.

Intro

This integration provides the ability to grant users permissions to connect to the EC2 with a secure connection - SSM.

Prerequisites

Step-by-step guide

The EC2 instance role

Follow the steps below to create an EC2 instance role with the AmazonSSMManagedInstanceCore managed policy. Read more here.

  1. In the AWS IAM, Click Create new IAM Role
    1. Click Create Role
    2. Choose the AWS Service option
    3. From the dropdown list, choose EC2
    4. Choose EC2 Role for AWS System Manager. Click Next.
    5. Verify that the AmazonSSMManagerInstanceCore policy is added. Click Next
    6. Fill the Role name box (for example, ec2-ssm)
    7. Click Create role
  2. Go back to the Modify IAM Role page
    1. From the dropdown list, choose the new IAM role we created (ec2-ssm)
    2. Click Update IAM role
    3. Pleas note: it takes about 30 minutes for the AWS sync to finish.

Integrating Apono with the EC2 instances

  1. In the Apono UI, edit an existing AWS Org or AWS Account integration or create a new one.
  2. Add the EC2 Connect resource type.
  3. Complete the integration and click Integrate.

Results

Apono should now discover EC2 machines! You can now create and manage Access Flows to EC2 instances.