Private EC2 Shell Access with Session Manager: No Bastion Hosts, No Inbound Ports
Replace bastion hosts with AWS Systems Manager Session Manager for private EC2 shell access. Learn the minimal IAM and network design, trust boundaries, audit checks, and failure modes.