dstack icon indicating copy to clipboard operation
dstack copied to clipboard

[Feature]: Allow to use SSH via AWS Session Manager

Open peterschmidt85 opened this issue 8 months ago • 2 comments

Problem

Currently, both dstack server and dstack CLI require direct SSH access to VMs.

Similar to #2554 for GCP, AWS recommends using SSH via Session Manager to enforce the best security practices.

Solution

  1. Allow to enable use of Session Manager with the aws backendconfiguration. This will require thedstack serverto havessm:*` IAM permissions (e.g. to start sessions)
  2. Allow the dstack CLI client users to use locally configured AWS credentials to start sessions via the SSH config.

Workaround

No response

Would you like to help us implement this feature by sending a PR?

No

peterschmidt85 avatar Apr 24 '25 14:04 peterschmidt85