Awesome

terraform-aws-ssm-agent

A Terraform Module to create a simple, autoscaled SSM Agent EC2 instance along with its corresponding IAM instance profile. This is intended to be used with SSM Session Manager and other SSM functionality to replace the need for a Bastion host and further secure your cloud environment. This includes an SSM document to enable session logging to S3 and CloudWatch for auditing purposes.

Big shout out to the following projects which this project uses/depends on/mentions:

1. gjbae1212/gossm
2. cloudposse/terraform-null-label
3. cloudposse/terraform-aws-vpc
4. cloudposse/terraform-aws-dynamic-subnets
5. cloudposse/terraform-aws-kms-key
6. cloudposse/terraform-aws-s3-bucket
7. Cloud Posse's Terratest Setup.

Usage

Module Usage:

module "ssm_agent" {
  source     = "masterpointio/ssm-agent/aws"
  version    = "0.15.1"
  stage      = var.stage
  namespace  = var.namespace
  vpc_id     = module.vpc.vpc_id
  subnet_ids = module.subnets.private_subnet_ids
}

module "vpc" {
  source  = "cloudposse/vpc/aws"
  version = "2.1.0"

  namespace = var.namespace
  stage     = var.stage
  name      = var.name

  ipv4_primary_cidr_block          = "10.0.0.0/16"
  assign_generated_ipv6_cidr_block = true
}

module "subnets" {
  source    = "cloudposse/dynamic-subnets/aws"
  version   = "2.3.0"
  namespace = var.namespace
  stage     = var.stage

  availability_zones = var.availability_zones
  vpc_id             = module.vpc.vpc_id
  igw_id             = [module.vpc.igw_id]
  ipv4_cidr_block    = [module.vpc.vpc_cidr_block]
  ipv6_enabled       = var.ipv6_enabled
}

Connecting to your new SSM Agent:

INSTANCE_ID=$(aws autoscaling describe-auto-scaling-instances | jq --raw-output ".AutoScalingInstances | .[0] | .InstanceId")
aws ssm start-session --target $INSTANCE_ID

OR

Use the awesome gossm project.

Requirements

Providers

Modules

Resources

Inputs

Outputs