Marco André Dinis 859898635f Use Amazon EICE to connect into EC2 instances (#30632) ...

* Use Amazon EICE to connect into EC2 instances

This PR adds a new method to SSH into EC2 instances.
It uses the Amazon EC2 Instance Connect Endpoint to do so.

You can read more about the capabilities/limitations of this feature
here
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/connect-using-eice.html

From the Teleport point of view, this uses the AWS OIDC Integration to
call the AWS APIs.
This connection mode is similar to the Agentless mode, where Teleport
connects to the OpenSSH daemon on the target server.
Except, that with this mode there's no required set up on the target
machine (no CAs are being used).

An overview of the flow when the user tries to SSH into a node:
- an SSH Public Key is sent to the target EC2 Instance
- a connection is made to the EC2 Instance Connect Endpoint using
  websockets, which in turn pipes the connection to the Private IP of
  the EC2 Instance

* review pt1

* pass CA for tests

* add godocs to OpenTunnelEC2

* fetch proxy public address jit

* add docs and move key generation to native package

* remove tcp socket

2023-08-24 16:38:51 +00:00

..

modules_test.go

Enable GCI linter (#17894)

2022-10-28 20:20:28 +00:00

modules.go

Use Amazon EICE to connect into EC2 instances (#30632)

2023-08-24 16:38:51 +00:00

test.go

fix flaky tests (#24117)

2023-04-05 16:39:51 +00:00