This installs three components:Īn AuthorizedKeysCommand sshd configuration directive, which acts as a login event hook and dynamically retrieves

Run keymaker install on instances that you want your users to connect to. Keymaker provides an integrated way for a user to upload their public SSH key to their IAM account Keymaker uses this metadata to authenticate Their metadata (up to 5 keys can be added individual keys can be disabled). Principle of operationĪmazon Web Services IAM user accounts provide the ability to add SSH public keys to Use keymaker -help to get a full description and list of options for each command. List_keys Get public SSH keys for a given or current IAM/SSH user.ĭisable_key Disable a given public SSH key for a given or current IAM/SSH user.Įnable_key Enable a given public SSH key for a given or current IAM/SSH user.ĭelete_key Delete a given public SSH key for a given or current IAM/SSH user.Ĭonfigure Perform administrative configuration tasks on the current AWS account. Run this command for each user who will be accessing EC2 hosts. In client mode (running on a computer that you will connectįrom), you can run keymaker, where subcommand is: upload_key Upload public SSH key for a user. Run keymaker with no arguments to get usage information. Keymaker requires OpenSSH v6.2+, provided by Ubuntu 14.04+ and RHEL7+. You can also manually configure these permissions, or attach the IAMReadOnlyAccess managed Keymaker IAM policy to the role INSTANCE_ROLE (which you should then assign, via an IAM Instance Profile, to any Keymaker configure -instance-iam-role INSTANCE_ROLEĪs a privileged IAM user, which will create and attach a

Iam:GetUser, iam:ListGroups, iam:GetGroup, iam:ListGroupsForUser, iam:GetRole,Īnd sts:GetCallerIdentity. Keymaker is the modern, minimalistic alternative to LDAP or ActiveĮnsure processes launched by sshd have the IAM permissions iam:GetSSHPublicKey, iam:ListSSHPublicKeys,

You, the AWS account administrator,ĭefine or import user and group identities in IAM, and instances in your account dynamically retrieve and use those That securely manages the process of SSH public key sharing and verification, user and group synchronization, and homeĭirectory sharing (via optional EFS integration). Keymaker is the missing link between SSH and IAM accounts on Amazon AWS.

Keymaker untuk bandicam