search

moia-oss / bastion-host-forward

CDK Construct for creating a bastion host to forward a connection to several AWS data services inside a private subnet from your local machine
https://www.npmjs.com/package/@moia-oss/bastion-host-forward
Apache License 2.0
30 stars 6 forks source link

Question: Advantages over using the AWS-StartPortForwardingSessionToRemoteHost SSM template #401

Open caveman-dick opened 4 months ago

caveman-dick commented 4 months ago

Hi

I'm just wondering if you can see any advantages to use this over the AWS-StartPortForwardingSessionToRemoteHost SSM template:

https://aws.amazon.com/blogs/mt/use-port-forwarding-in-aws-systems-manager-session-manager-to-connect-to-remote-hosts/

snowiow commented 4 months ago

Hi, no, in essence this construct is doing the same what is described there, but with a jumphost.

Alternatively, you could also try to setup a bastion host (jump server) and install all the tools on it but that would require lot of extra work to setup and maintain

this was basically the idea of this construct to get that setup part automated and make the jumphost approach easier. Back when this construct was introduced (2020), there was no possibility to port forward from session manager directly. That feature was only released in 2022