diff --git a/README.md b/README.md index f8f1e99..beab350 100644 --- a/README.md +++ b/README.md @@ -1,6 +1,6 @@ # Manage AWS EC2 SSH access with IAM -This showcase demonstrates how you can use your IAM user's public SSK key to get access via SSH to an EC2 instance. +This showcase demonstrates how you can use your IAM user's public SSH key to get access via SSH to an EC2 instance. ## How does it work @@ -9,7 +9,7 @@ A picture is worth a thousand words: ![Architecture](./docs/architecture.png?raw=true "Architecture") * On first start all IAM users are imported and local users are created - * The import also runs every 10 minutes + * The import also runs every 10 minutes (via cron - calls import_users.sh) * On every SSH login the EC2 instance tries to fetch the public key(s) from IAM using sshd's `AuthorizedKeysCommand` * You can restrict that the EC2 instance is only allowed to download public keys from certain IAM users instead of `*`. This way you can restrict SSH access within your account * As soon as the public SSH key is deleted from the IAM user a login is no longer possible