· 1 min read
SSM Port Forwarding – Private Windows RDP Access
Use SSM Session Manager port forwarding to get private RDP access to Windows EC2 instances without opening inbound ports or a bastion host.
- ec2
- aws
- port forwarding
- rdp
- ssm
SSM Port Forwarding

Session Manager Plugin
https://docs.aws.amazon.com/systems-manager/latest/userguide/session-manager-working-with-install-plugin.html
Terraform Templates
https://github.com/kheriox-technologies/yt-rdp-ssm-port-forwarding
SSM Start Session
aws ssm start-session --target i-0fd53f1c98ea683f8 --document-name AWS-StartPortForwardingSession --parameters '{"portNumber":["3389"],"localPortNumber":["9000"]}'