How to access your EC2 instance via SSH only from specific IP-Addresses

UpdatedJune 11, 2023

•3 min read•View as Markdown

How to access your EC2 instance via SSH only from specific IP-Addresses

Dennis Schmidt

Software Engineer at BMW, Oracle Certified Professional Java SE 11 Developer

Comments

Join the discussion

No comments yet. Be the first to comment.

More from this blog

Keycloak: Failed to verify identity token: Invalid token issuer

Two whole days of my life, down the drain! Thankfully, it was just my pet project, but I ended up sacrificing an entire weekend wrestling with this enigma. So, I'm writing this blog post to save you from the same fate. Problem: I am using Quarkus and...

Oct 30, 20235 min read

Keycloak: Failed to verify identity token: Invalid token issuer

My Bash Scripting Cheat Sheet

Shebang Shebang is a combination of bash # and bang ! followed the the bash shell path. Shebang is simply an absolute path to the bash interpreter. #! /bin/bash Make a file executable To make a .sh file executable only for your user, use: chmod u+x...

Oct 25, 20231 min read

My PostgreSQL Cheat Sheet

1. Show tables The command \dt stands for describe tables and shows all tables in the database, equivalent to show tables in MySQL. \dt 2. Create user Run the following SQL command to create a user. Replace and 'password' with the desired username a...

Oct 20, 20231 min read

My macOS Cheat Sheet

How to set JAVA_HOME on macOS Monterey? First check which shell you are using (either bash or zsh). For zsh shell, we can put the environment variables at ~/.zshenv or ~/.zshrc.echo $SHELL /bin/zsh On Mac OS X 10.5 or later, we can use /usr/libexe...

Oct 19, 20231 min read

My Open Source Cheat Sheet

Fork your open source project you want to contribute into your GitHub and clone your fork. git clone git@github.com:dcnis/mockito.git Show current configured remote repositories. The origin repo points to your fork on GitHub. git remote -v > origin ...

Aug 29, 20231 min read

Welcome to my corner of the web

17 posts

2. Create Security Group

Go to the AWS service VPC and select Security groups.

Click Create security group

Security group name: SSH

Description: Allows SSH access from a managed prefix list

VPC:

Under Inbound rules click Add rule

Type: SSH

Source: Custom

Scroll down to Prefix lists and select your created newly created IP-Whitelist for SSH access prefix list.

Click Create security group

3. Attach Security Group to EC2 instance

Go to the AWS service EC2 and select your EC2 instance

Go to Actions -> Security and click Change security groups

Under Associated security groups select your newly created Security Group SSH

Click Add security group

Click Save

Now you should be able to connect via SSH to your EC2 instance. Of course you also need a valid Key pair assigned to your EC2 instance and have the corresponding private key on your local machine or client.

4. Access your EC2 instance via SSH

Go to the AWS service EC2 and select your EC2 instance.

Make sure under Details -> Key pair assigned at launch you have a Key pair assigned and you have the corresponding Private Key (usually a .cer file) saved on your local machine.

On your local machine open a new terminal and navigate to your Private Key cer file.

Connect to your EC2 instance with following command

ssh -i privateKey.cer ubuntu@10.20.30.40

Replace the ip-address 10.20.30.40 with your Public ip-address of your EC2 instance and ubuntu with your user.

5. Conclusion

In this article we learned how to create a Managed prefix list to simplify the process of adding and modifying IP addresses that are permitted to establish an SSH connection to our EC2 instance. We have also covered the steps involved in creating a Security Group and configuring an Inbound rule specifically designed to allow SSH access via Port 22 from our newly created Managed prefix list. By assigning this Security group to our EC2 instance, we have successfully established SSH connectivity, provided that we have a valid Key pair associated with our EC2 instance and have saved the corresponding Private Key on our local machine or client.

How to access your EC2 instance via SSH only from specific IP-Addresses

Comments

More from this blog

Keycloak: Failed to verify identity token: Invalid token issuer

My Bash Scripting Cheat Sheet

My PostgreSQL Cheat Sheet

My macOS Cheat Sheet

My Open Source Cheat Sheet

Table of Content

1. Create Managed-Prefixlist

2. Create Security Group

3. Attach Security Group to EC2 instance

4. Access your EC2 instance via SSH

5. Conclusion

Command Palette

Comments

More from this blog

Table of Content

1. Create Managed-Prefixlist

2. Create Security Group

3. Attach Security Group to EC2 instance

4. Access your EC2 instance via SSH

5. Conclusion