Skip to content

Commit ae017ec

Browse files
authored
Update README.md
1 parent 60a59e2 commit ae017ec

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -51,7 +51,7 @@ ssh <INSTACEC_USER>@<INSTANCE_ID> \
5151
-o ProxyCommand="~/.ssh/aws-ssm-ec2-proxy-command.sh %h %r %p ~/.ssh/id_rsa.pub"
5252
```
5353

54-
## Recommended Usage of `ec2-instance-connect:SendSSHPublicKey` instead of `ssm:SendCommand`
54+
## Recommended Usage of `ec2-instance-connect:SendSSHPublicKey`
5555
The advantage from a security perspective is that you don't need to grant `ssm:SendCommand` to users and there by the permission to execute everything as root.
5656
Instead you only grant `ec2-instance-connect:SendSSHPublicKey` permission to a specific instance user e.g. `ec2-user`.
5757
* Ensure [Prerequisits](#prerequisits)

0 commit comments

Comments
 (0)