DevOps and SysOps on AWS

Securely deploys and hardens an AWS EC2 instance using least-privilege IAM, restrictive security groups, SSM, OS updates, SSH hardening, and logging—following CIS benchmarks and AWS best practices.

aws ssm public documents

aws ssm public patch baselines

🔑 Inject AWS SSM Parameters

AWS SSM 連線到 EC2、打通 RDS & Elasticache & MSK 到本機、使用 SCP 傳送檔案/拉取遠端檔案到本機

Install Session Manager plugin for the AWS CLI 🔧

Manage your private resources via a tunnel

Files and Solutions to SSM-CTF-Archive

SSH over AWS SSM. No bastions or public-facing instances. SSH user management through IAM. No requirement to store SSH keys locally or on server.

AWS - Secure Remote Access via IAM (STS, MFA, IAM Role) + SSM to SSH

Run an interactive command on EC2 instances using AWS SSM in synchronised tmux panes

Patching the EC2 instances used by an Autoscaling Group (ASG) once or monthly through automation.

Get AWS Systems Manager parameters by prefix to environment variables. (GitHub Actions)

AWS Predfined SSM Documents

A script that provides the ability to provision AWS instances via SSM.