SSH Over SSM tunnel with AWS DirectConnect without Internet

Hi, yes, it is feasible to use SSH by SSM Session Manager tunnel without Internet to access EC2 instance in VPC using AWS DirectConnect.

Here are the steps involved:

Create a VPC endpoint for Systems Manager in your VPC. Install the SSM Agent on your on-premise PC. Configure the SSM Agent to use the VPC endpoint for Systems Manager. Launch a session to the EC2 instance using SSM Session Manager. The SSM Agent will create a secure tunnel between your on-premise PC and the EC2 instance. This tunnel will allow you to SSH to the EC2 instance without having to open any ports on your on-premise PC.

Here are some additional details:

The VPC endpoint for Systems Manager will allow you to access SSM Session Manager without having to go through the Internet. The SSM Agent will create a secure tunnel using the HTTPS protocol. The tunnel will be encrypted using the TLS 1.2 protocol.