software.amazon.awscdk.services.ec2

Class BastionHostLinux

java.lang.Object

software.constructs.Construct

software.amazon.awscdk.core.Construct

software.amazon.awscdk.core.Resource

software.amazon.awscdk.services.ec2.BastionHostLinux

All Implemented Interfaces:

IConstruct, IDependable, IResource, IConnectable, IInstance, IGrantable

@Generated(value="jsii-pacmak/1.74.0 (build 6d08790)",
           date="2023-03-14T16:25:27.858Z")
public class BastionHostLinux
extends Resource
implements IInstance

This creates a linux bastion host you can use to connect to other instances or services in your VPC.

The recommended way to connect to the bastion host is by using AWS Systems Manager Session Manager.

The operating system is Amazon Linux 2 with the latest SSM agent installed

You can also configure this bastion host to allow connections via SSH

Example:

 BastionHostLinux host = BastionHostLinux.Builder.create(this, "BastionHost")
         .vpc(vpc)
         .blockDevices(List.of(BlockDevice.builder()
                 .deviceName("EBSBastionHost")
                 .volume(BlockDeviceVolume.ebs(10, EbsDeviceOptions.builder()
                         .encrypted(true)
                         .build()))
                 .build()))
         .build();
 

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	BastionHostLinux.Builder A fluent builder for BastionHostLinux.

Nested classes/interfaces inherited from interface software.amazon.awscdk.services.ec2.IInstance

IInstance.Jsii$Default, IInstance.Jsii$Proxy

Constructor Summary

Constructors

Modifier	Constructor and Description
protected	BastionHostLinux(software.amazon.jsii.JsiiObject.InitializationMode initializationMode)
protected	BastionHostLinux(software.amazon.jsii.JsiiObjectRef objRef)
	BastionHostLinux(software.constructs.Construct scope, java.lang.String id, BastionHostLinuxProps props)

Method Summary

Modifier and Type	Method and Description
void	allowSshAccessFrom(IPeer... peer) Allow SSH access from the given peer or peers.
Connections	getConnections() Allows specify security group connections for the instance.
IPrincipal	getGrantPrincipal() The principal to grant permissions to.
Instance	getInstance() The underlying instance resource.
java.lang.String	getInstanceAvailabilityZone() The availability zone the instance was launched in.
java.lang.String	getInstanceId() The instance's ID.
java.lang.String	getInstancePrivateDnsName() Private DNS name for this instance.
java.lang.String	getInstancePrivateIp() Private IP for this instance.
java.lang.String	getInstancePublicDnsName() Publicly-routable DNS name for this instance.
java.lang.String	getInstancePublicIp() Publicly-routable IP address for this instance.
IRole	getRole() The IAM role assumed by the instance.
Stack	getStack() The stack in which this resource is defined.

Methods inherited from class software.amazon.awscdk.core.Resource

applyRemovalPolicy, generatePhysicalName, getEnv, getPhysicalName, getResourceArnAttribute, getResourceNameAttribute, isResource

Methods inherited from class software.amazon.awscdk.core.Construct

getNode, isConstruct, onPrepare, onSynthesize, onValidate, prepare, synthesize, validate

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface software.amazon.awscdk.core.IResource

applyRemovalPolicy, getEnv

Methods inherited from interface software.amazon.awscdk.core.IConstruct

getNode

Constructor Detail

BastionHostLinux

protected BastionHostLinux(software.amazon.jsii.JsiiObjectRef objRef)

BastionHostLinux

protected BastionHostLinux(software.amazon.jsii.JsiiObject.InitializationMode initializationMode)

BastionHostLinux

public BastionHostLinux(software.constructs.Construct scope,
                        java.lang.String id,
                        BastionHostLinuxProps props)

Parameters:

scope - This parameter is required.

id - This parameter is required.

props - This parameter is required.

Method Detail

allowSshAccessFrom

public void allowSshAccessFrom(IPeer... peer)

Allow SSH access from the given peer or peers.

Necessary if you want to connect to the instance using ssh. If not called, you should use SSM Session Manager to connect to the instance.

Parameters:

peer - This parameter is required.

getConnections

public Connections getConnections()

Allows specify security group connections for the instance.

Specified by:

getConnections in interface IConnectable

getGrantPrincipal

public IPrincipal getGrantPrincipal()

The principal to grant permissions to.

Specified by:

getGrantPrincipal in interface IGrantable

getInstance

public Instance getInstance()

The underlying instance resource.

getInstanceAvailabilityZone

public java.lang.String getInstanceAvailabilityZone()

The availability zone the instance was launched in.

Specified by:

getInstanceAvailabilityZone in interface IInstance

getInstanceId

public java.lang.String getInstanceId()

The instance's ID.

Specified by:

getInstanceId in interface IInstance

getInstancePrivateDnsName

public java.lang.String getInstancePrivateDnsName()

Private DNS name for this instance.

Specified by:

getInstancePrivateDnsName in interface IInstance

getInstancePrivateIp

public java.lang.String getInstancePrivateIp()

Private IP for this instance.

Specified by:

getInstancePrivateIp in interface IInstance

getInstancePublicDnsName

public java.lang.String getInstancePublicDnsName()

Publicly-routable DNS name for this instance.

(May be an empty string if the instance does not have a public name).

Specified by:

getInstancePublicDnsName in interface IInstance

getInstancePublicIp

public java.lang.String getInstancePublicIp()

Publicly-routable IP address for this instance.

(May be an empty string if the instance does not have a public IP).

Specified by:

getInstancePublicIp in interface IInstance

getRole

public IRole getRole()

The IAM role assumed by the instance.

getStack

public Stack getStack()

The stack in which this resource is defined.

Specified by:

getStack in interface IResource

Overrides:

getStack in class Resource