dstack
dstack copied to clipboard
[Feature]: Allow to use SSH via AWS Session Manager
Problem
Currently, both dstack server and dstack CLI require direct SSH access to VMs.
Similar to #2554 for GCP, AWS recommends using SSH via Session Manager to enforce the best security practices.
Solution
- Allow to enable use of Session Manager with the
awsbackendconfiguration. This will require thedstack serverto havessm:*` IAM permissions (e.g. to start sessions) - Allow the
dstackCLI client users to use locally configured AWS credentials to start sessions via the SSH config.
Workaround
No response
Would you like to help us implement this feature by sending a PR?
No