亚马逊AWS官方博客

Category: Security, Identity, & Compliance

Farewell to Bastion Hosts: Achieving Secure and Intelligent Operations for Private Subnets Using AWS EICE (EC2 Instance Connect Endpoint) and Chaterm

This article introduces the integration of Chaterm, an AI-powered terminal tool, with AWS EC2 Instance Connect Endpoint(EICE) to address operational challenges in private subnets. Traditional approaches require VPNs or bastion hosts,whereas EICE leverages IAM-based authentication to establish secure connections without public IP addresses. Chaterm wraps the EICE capability with cross-platform auto-adaptation and a visual interface. More importantly, its built-in AI Agent can perform intelligent health checks, fault diagnosis, and batch management directly on private EC2 instances —significantly improving both operational efficiency and security.

告别堡垒机：使用 AWS EICE （EC2 Instance Connect Endpoint） 与 Chaterm 实现私有子网的安全智能运维

本文介绍了Chaterm智能终端工具与AWS EC2 Instance Connect Endpoint (EICE)的集成方案，用于解决私有子网运维难题。传统方案需要VPN或跳板机，而EICE通过IAM身份认证实现无公网IP的安全连接。Chaterm封装了EICE能力，提供跨平台自动适配和可视化操作界面，更重要的是内置AI Agent可直接对私网EC2进行智能巡检、故障诊断和批量管理，大幅提升运维效率和安全性。

AWS Security Hub Extended 通过精选合作伙伴解决方案提供全栈企业级安全防护

今天，我们宣布推出 AWS Security Hub Extended。该计划简化了全栈企业级安全解决方案的采购、部署和集成流程，覆盖端点、身份、邮件、网络、数据、浏览器、云、AI 和安全运营等各个领域。借助 Extended 计划，您可以将安全防护能力扩展至 AWS 外部，通过精选 AWS 合作伙伴解决方案来帮助保护您的企业资产，包括 7AI、Britive、CrowdStrike、Cyera、Island、Noma、Okta、Oligo、Opti、Proofpoint、SailPoint、Splunk（思科旗下公司）、Upwind、Zscaler 等。

← Older posts
Newer posts →