Once deployed, please allow up to one minute for the HoneyDrop SSH service to become active. To connect to the HoneyDrop appliance, use the following command structure (notice the username is set to ubuntu and the port set to 2222): ssh -i <private key> ubuntu@<IP address> -p 2222

Edit the /etc/honeydrop/honeydrop.conf file to enable services: nano /etc/honeydrop/honeydrop.conf

To enable a service, change its boolean value to "true". Setting it to "false" will disable the service.

If you have not done so already, you will need to create and attach an IAM role to this EC2 instance that allows it to send logs to CloudWatch:

Navigate to https://console.aws.amazon.com/iamv2/home#/roles  and click on "Create role". Set the trusted entity type to "AWS service" and the use case to "EC2", now click next. Attach the "CloudWatchAgentServerPolicy" and click next. Optionally add your keys and click next. Name the role "HoneyDropRole" and click "Create role". Navigate back to EC2, https://console.aws.amazon.com/ec2/v2/home#Instances:instanceState=running  Right-click on the HoneyDrop appliance, under "Security" click "Modify IAM role" Select the HoneyDropRole and click "Save".

Update the HoneyDrop's security group to only allow inbound traffic to the services enabled from the target VPC network IP ranges.

For more detailed instructions and a walk-through video, please visit: https://termilus.com/how-to-deploy-and-setup-honey-drop-in-aws/