About This Architecture

Secure EC2 access architecture using AWS Systems Manager Session Manager eliminates open RDP/SSH ports while maintaining bastion-free remote administration. Client PCs connect via Session Manager over HTTPS to t3.medium and m5.large EC2 instances in ap-northeast-1 Tokyo region, with inbound traffic restricted to five client IPs through a dedicated security group. CloudWatch monitors CPU and status checks on both instances, triggering alerts to AWS Budgets for monthly cost thresholds, while AWS Backup captures daily AMIs with three-generation retention. Fork this diagram to customize instance types, subnet ranges, or add additional monitoring dimensions for your production workloads.

People also ask

How do I securely access EC2 instances without opening SSH or RDP ports using AWS Systems Manager?

This diagram shows a zero-bastion architecture where AWS Systems Manager Session Manager provides HTTPS-encrypted remote access to EC2 instances without exposing ports 22 or 3389. CloudWatch monitors instance health and CPU, while AWS Backup automates daily AMI snapshots with three-generation retention and AWS Budgets alerts on monthly costs.