Connect to EC-2 instance using SSH, SSM and VS Code. No public access or ports required

#aws #ec2 #vscode

How to

Install SSH extension to vs code.
Import your public Yubikey cert to AWS Key pairs and name it Yubi.
Deploy EC2 with Yubi key attached.
Add the following to ~/.ssh/config:

# This is needed for VS code to know how to connect
Host i-0b377eeb467ae2f92
    HostName i-0b377eeb467ae2f92

# SSH over Session Manager implementation. Change profile as you wish.
Host i-* mi-*
    User ec2-user
    ProxyCommand sh -c "aws ssm start-session --target %h --document-name AWS-StartSSHSession --parameters 'portNumber=%p' --profile <<my_aws_profile>> --region eu-central-1"