Ravi Sir's Cards › AWS
Session Manager vs SSH
This revision card explains Session Manager vs SSH. It starts from the need that bastions and long-lived keys still get forgotten and scanned. It describes session Manager uses IAM + SSM agent over the AWS API — no inbound 22 required. The how-to section notes prefer Session Manager; log sessions to S3/CloudWatch; break-glass only if needed. An example on the card is auditor asks who ran commands last night — Session logs answer.
Read card text
What this card says
Why do we need it?
Bastions and long-lived keys still get forgotten and scanned.
What is it?
Session Manager uses IAM + SSM agent over the AWS API — no inbound 22 required.
StartSession
How to do it
Prefer Session Manager; log sessions to S3/CloudWatch; break-glass only if needed.
Example
Auditor asks who ran commands last night — Session logs answer.