How to Configure Just-in-Time Node Access in AWS Systems Manager
· 11:36 · Watch on YouTube ↗
Summary
A tutorial demonstrates just-in-time access requests and approvals for AWS Systems Manager-managed servers, along with session logging and RDP recording. It also covers approval policies and permissions that prevent bypassing the access process.
Key points
- AWS Systems Manager Session Manager can provide access to managed Windows and Linux servers, with session activity recorded.
- The demonstration shows a user requesting access to a server and a designated approver reviewing and approving the request.
- The tutorial demonstrates remote desktop access to a Windows server and recording the RDP session.
- Approval policies can be configured for automatic approval based on group membership or for manual, potentially multi-level approval.
- The demonstrated manual policy sets a 24-hour access duration and targets managed nodes.
- The tutorial recommends logging session activity and warns that users with direct permission to start a Session Manager session could bypass the just-in-time access process.
Article Details
- Topics
- [00:00] AWS Systems Manager fleet management and Session Manager access and recording
- [02:00] Demonstration of requesting and approving just-in-time server access
- [05:00] Windows remote desktop access and session recording
- [08:07] Automatic and manual approval policies, session logging, and permissions that can bypass just-in-time access