Skip to content
This repository has been archived by the owner on Nov 8, 2021. It is now read-only.

Commit

Permalink
Merge pull request #1 from slmingol/patch-1
Browse files Browse the repository at this point in the history
Fixed typo, described import every 10 mins
  • Loading branch information
michaelwittig committed Apr 20, 2016
2 parents 2dff135 + 36069bc commit eac9603
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# Manage AWS EC2 SSH access with IAM

This showcase demonstrates how you can use your IAM user's public SSK key to get access via SSH to an EC2 instance.
This showcase demonstrates how you can use your IAM user's public SSH key to get access via SSH to an EC2 instance.

## How does it work

Expand All @@ -9,7 +9,7 @@ A picture is worth a thousand words:
![Architecture](./docs/architecture.png?raw=true "Architecture")

* On first start all IAM users are imported and local users are created
* The import also runs every 10 minutes
* The import also runs every 10 minutes (via cron - calls import_users.sh)
* On every SSH login the EC2 instance tries to fetch the public key(s) from IAM using sshd's `AuthorizedKeysCommand`
* You can restrict that the EC2 instance is only allowed to download public keys from certain IAM users instead of `*`. This way you can restrict SSH access within your account
* As soon as the public SSH key is deleted from the IAM user a login is no longer possible
Expand Down

0 comments on commit eac9603

Please sign in to comment.