Now with AWS SSO, SAML 2.0 and Cognito integration for Single-Sign on!

Guacamole is a browser based remote access tool that provides easy access to hosts in all your VPCs, across accounts and regions. Access to Windows desktops (RDP), Linux terminals (SSH) and Kubernetes Pods is supported. No client software needed, a modern browser is all you need. This also enables administrators in corporate environments behind restrictive proxies to access remote servers on AWS.

This product ships with version 1.5.3 of the popular open-source HTML5 RDP and SSH client Apache Guacamole and GuAWS, an agent that queries your AWS environment to automatically discover running instances.

GuAWS is continuously scanning your VPC for new instances using the AWS API. It also scans across VPC, account and regional boundaries where VPC Transit Gateways or VPC Peering Connections are used. Your servers are organized by VPC and security group which makes it easy to find the right instance and manage access. Additionally, connections opened by users are logged to CloudWatch Logs.

A user management system provides fine grained access control to individual groups or instances. Single sign-on authentication can easily be added through Amazon Cognito or other OpenID compliant providers such as Auth0, Okta or Duo. Multi-Factor authentication is provided by the built-in TOTP plugin that works with Google Authenticator or similar apps. Follow the Setup Instructions link in the sidebar for additional details.