Skip to content

Commit 1ba47ae

Browse files
authored
Update README.md
1 parent 4cef50c commit 1ba47ae

File tree

1 file changed

+8
-7
lines changed

1 file changed

+8
-7
lines changed

README.md

Lines changed: 8 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -54,11 +54,12 @@ ssh <INSTACEC_USER>@<INSTANCE_ID> \
5454
The advantage from security perspective it that you don't need to grant `ssm:SendCommand` to users and there by the permission to execute everything as root.
5555
Instead you only grant `ec2-instance-connect:SendSSHPublicKey` permission to a specific instance user e.g. `ec2-user`.
5656
* Ensure [Prerequisits](#prerequisits)
57-
* Use this [aws-ssm-ec2-proxy-command.sh](ec2-instance-connect/aws-ssm-ec2-proxy-command.sh) proxy command script instead
58-
* Use this [IAM Policy Example](ec2-instance-connect/aws-ssm-ec2-iam-policy.json) instead
59-
* `ssm:StartSession` for DocumentName: `AWS-StartSSHSession` and Target Instance
60-
* [AWS Documentation](https://docs.aws.amazon.com/systems-manager/latest/userguide/getting-started-restrict-access-examples.html)
61-
* `ec2-instance-connect:SendSSHPublicKey`
62-
* [AWS Documentation](https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-rc-setting-up.html)
63-
* You may need to adjust `ec2:osuser` to match your needs. Default osuser is `ec2-user`
6457
* Follow [Install Guide](#install-ssh-proxy-command)
58+
* Use this [aws-ssm-ec2-proxy-command.sh](ec2-instance-connect/aws-ssm-ec2-proxy-command.sh) proxy command script instead
59+
* Use this [IAM Policy Example](ec2-instance-connect/aws-ssm-ec2-iam-policy.json) instead
60+
* `ssm:StartSession` for DocumentName: `AWS-StartSSHSession` and Target Instance
61+
* [AWS Documentation](https://docs.aws.amazon.com/systems-manager/latest/userguide/getting-started-restrict-access-examples.html)
62+
* `ec2-instance-connect:SendSSHPublicKey`
63+
* [AWS Documentation](https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-rc-setting-up.html)
64+
* You may need to adjust `ec2:osuser` to match your needs. Default osuser is `ec2-user`
65+

0 commit comments

Comments
 (0)