Systems Manager

Question 1

Role of Systems Manager’s Default Host Management Configuration (DHMC)

Answer 1

Automatically passes the “AmazonSSMManagedInstanceCore” Role to the EC2 Instance

Prerequisites:

Must be enabled per region
EC2 instances must have:
SSM Agent Installed
IMDSv2 Installed / Metadata enabled (In the “Advanced Details” section of “EC2 Launch”)

Question 2

What three things are necessary for an IAM User to use SSM Session Manager to connect to an EC2 Instance?

Answer 2

1. Instance must have the SSM Agent installed
2. Instance profile must have “AmazonSSMManagedInstanceCore” attached
3. User must have permission to initiate a session. (Such as ssm:startsession)

Question 3

Two ways to connect to an instance in a PRIVATE SUBNET using SSM Session Manager

Answer 3

Instance —–> Nat Gateway ——–> Internet Gateway
Instance ——> VPC Interface Endpoint