(2024.12.1) - SSH Access in Permissions Policy not available

[tennex-preitchel]

Describe the bug
Unable to enable SSH Access in RES portal for internal (not public facing) deployment
The option to enable SSH and display SSH instructions to users cannot be toggled in the UI

Steps to reproduce
Steps to reproduce the behavior:

1. Go to Permissions Policy
2. Click on Environment Boundries
3. Try to toggle "SSH Access"
4. This should add a bastion host per the info block but the option is greyed out in the UI, note this is a deployment hosted as not public facing

Screenshots/Video

Environment (please complete the following information):

• RES Version: RES_2024.12.1
• Software Stack AMI ID: N/A
• Software Stack OS: N/A

[Murielxun]

Hi, thanks for reaching out. This is by design that bastion host is turned off in not public facing deployment, you cannot directly access RES through the public internet since there is not direct access over the public internet.

Please let us know if you have further questions.

[tennex-preitchel]

Thanks, the quick response is appreciated.
Maybe this would be better categorized as a feature request then?
Having the ability to display SSH instructions to users would be beneficial for private deployments. No bastion host being needed since the resources are all internal makes sense, but users area still looking for easy to view instructions in the web portal for accessing their VDI workstations directly via SSH.

[Murielxun]

Thanks for clarifying the feature request. The service team will look into this and get back to you.

[Mohjeet]

Just wanted to follow up, just to make sure I am understanding correctly. You have a use case where users have instances within the private vpc and you would like for RES to provide a dynamic SSH command which can be used to SSH to a VDI from the instance?

[tennex-preitchel]

Yes,
User's would like to SSH directly to the VDI instances, network ingress is configured to the private subnets of the VPC within which the instances reside. However, the ability for users to view the instructions/access the instances is not available as it was with our previous (public facing) deployment. The bastion host wouldn't be needed in this scenario, but sshd running and configured to allow login via AD username/password with the ability to display instructions to users in RES would be great.

Thanks!
Paul

[gf-atebbe]

Just wanted to check in if there is an update on this enhancement request? It would be really helpful if the users could see the IP address and SSH instructions from within RES when deployed within a private VPC. At the moment, the users are forced to bounce over to the AWS console to get the IP address so that they can SSH.