aws-egress

Controlled egress to authorised domains from AWS

requirements

• in AWS MarketPlace, subscribe to Amazon Linux 2
• in AWS MarketPlace, subscribe to Discriminat
• at AWS Systems Manager, Session Manager, Preferences, configure as below
• create CloudWatch log group sessionmanager if needed

usage

• deploy with the Terraform state file on your laptop

terraform init
terraform workspace new dev
terraform plan
terraform apply

connecting to virtual machines

• A remote SSH session in the AWS console doesn't require a SSH key

• In the AWS Console, EC2, select the instance

  

• Press Connect

• Choose the Session Manager tab

• 

• You now have a remote bash shell session in your browser

changing between AWS NAT Gateways and DiscrimiNAT

• initially infrastructure will be deployed with NAT Gateways:

• to deploy DiscmiNATs, change variable discriminat from false to true or override using terraform.tfvars
• apply Terraform