The UID of the account isĬomputed from a hash of the user's SSH key, making it stable across instances that run Keymaker. This script detects if a Linux user account does not exist for the authenticating principal butĪn authorized IAM account exists with the same name, and creates the account on demand.
#Keymaker bandicam 2019 install#
Run keymaker install on instances that you want your users to connect to. Keymaker provides an integrated way for a user to upload their public SSH key to their IAM account Keymaker uses this metadata to authenticate Their metadata (up to 5 keys can be added individual keys can be disabled). Principle of operationĪmazon Web Services IAM user accounts provide the ability to add SSH public keys to
#Keymaker bandicam 2019 full#
Use keymaker -help to get a full description and list of options for each command. List_keys Get public SSH keys for a given or current IAM/SSH user.ĭisable_key Disable a given public SSH key for a given or current IAM/SSH user.Įnable_key Enable a given public SSH key for a given or current IAM/SSH user.ĭelete_key Delete a given public SSH key for a given or current IAM/SSH user.Ĭonfigure Perform administrative configuration tasks on the current AWS account. Run this command for each user who will be accessing EC2 hosts. In client mode (running on a computer that you will connectįrom), you can run keymaker, where subcommand is: upload_key Upload public SSH key for a user. Run keymaker with no arguments to get usage information. Keymaker requires OpenSSH v6.2+, provided by Ubuntu 14.04+ and RHEL7+. You can also manually configure these permissions, or attach the IAMReadOnlyAccess managed Keymaker IAM policy to the role INSTANCE_ROLE (which you should then assign, via an IAM Instance Profile, to any
Keymaker configure -instance-iam-role INSTANCE_ROLEĪs a privileged IAM user, which will create and attach a Iam:GetUser, iam:ListGroups, iam:GetGroup, iam:ListGroupsForUser, iam:GetRole,Īnd sts:GetCallerIdentity.
Ensure processes launched by sshd have the IAM permissions iam:GetSSHPublicKey, iam:ListSSHPublicKeys,.Keymaker is the modern, minimalistic alternative to LDAP or Active You, the AWS account administrator,ĭefine or import user and group identities in IAM, and instances in your account dynamically retrieve and use those That securely manages the process of SSH public key sharing and verification, user and group synchronization, and homeĭirectory sharing (via optional EFS integration). Keymaker is the missing link between SSH and IAM accounts on Amazon AWS. Keymaker: Lightweight SSH key management on AWS EC2
0 kommentar(er)
