* Package name    : ec2-instance-connect
  Version         : 1.1.19
  Upstream Contact: Daniel Anderson <dnde@amazon.com>
* URL             : https://github.com/aws/aws-ec2-instance-connect-config
* License         : Apache-2.0
  Programming Lang: POSIX shell
  Description     : Configures ssh daemon to accept EC2 Instance Connect ssh keys

EC2 Instance Connect is a service that publishes ssh keys for use by EC2
instances based on AWS Credentials. These keys are consumed by on-instance
configuration provided by this package. The ssh daemon will query EC2
Instance Metadata service for user-keys at ssh calltime, validate any if
present as well as validating their signature, and if all checks pass return
will include them in the authorized keys list.
.
In addition, there is an agent that harvests instance ssh host keys and
passes them back to the service.  This is for authentication purposes by
the EC2 console to open an in-browser ssh terminal connection.

BTW, it's already packaged in Ubuntu:
https://packages.ubuntu.com/source/plucky/ec2-instance-connect

Would you consider maintaining that within the cloud team under
https://salsa.debian.org/cloud-team?

It's also potentially something we would want to pre-install on our EC2
images, which we can discuss further once it's packaged.

noah

Indeed, that's a great idea. I'll do that.

This is my main motivation to package this tool. I'll follow up on
this and ping you once the package is available in the archive.