How to Create an EC2 Instance Using AWS in Simple Steps

Select Language:

If you want to manage your EC2 instances without using SSH directly, you need to understand how AWS Systems Manager (SSM) works. Simply having a bastion host isn’t enough for managing instances through Systems Manager. The key is installing the SSM Agent directly on the EC2 instances you want to control.

Here’s what you should do:
1. Install the SSM Agent on all EC2 instances you wish to manage, including your target instances.
2. Make sure each EC2 instance has the correct IAM roles assigned, so they can communicate with AWS Systems Manager.
3. Set up the necessary VPC endpoints for SSM communication, specifically for ssm, ec2messages, and ssmmessages.

If you’re using a bastion host as an intermediary, it can also have the SSM Agent installed. This allows you to connect to the bastion using Session Manager, a feature of Systems Manager. From there, you can connect to your target EC2 instance without needing SSH.

But remember, having only the bastion with SSM installed won’t let you manage the target EC2 instance remotely through Systems Manager. The target instance itself must also have the SSM Agent installed and the right permissions. Only then can you manage it smoothly using Systems Manager.

This setup ensures you can access and manage your EC2 instances securely, even if direct SSH access is restricted.