1- Create security group with outpund to everywhere and inbound on port 3350 to your ip only
2- Create role of policy SsmManagedInstanceCore
3- Install ubuntu machine with public ip enabled in public subnet, without keypair
4-Connect to machine using ssm session
then run the following commands
sudo su -
apt-get update
apt install xrdp
systemctl enable xrdp
add-apt-repository ppa:gnome3-team/gnome3
apt-get install gnome-shell ubuntu-gnome-desktop
passwd ubuntu
5-then connect using remote desktop application from your local machine to public ip of the ec2 machine
Top comments (1)
Nice walkthrough. Using SSM instead of exposing SSH is a good approach from a security perspective. I'd also recommend enabling automatic security updates and restricting RDP access as much as possible once everything is configured.