Ask HN: How do you provide SSH access to developers in your infrastructure

Use aws identities and policies to control ssh access to ec2 instances https://aws.amazon.com/about-aws/whats-new/2019/06/introduci...

Has some quirks but might be useful for companies using ec2 instances.

"gcloud compute ssh instance-name" and "kubectl exec ..." with IAM

I am still surprised that AWS has not created the same experience as GCP. the instance connect from the co-comment is an improvement, but requires install on each server and client, plus an extra step when you want to connect.

Use ldap as your centralised auth, add a schema extension for ssh public keys, configure sshd/pam/nss to use ldap (and the keys contained therein) for users/auth.

Use groups or a host attribute in ldap to manage access to specific servers or groups of servers.

Bonus: you can manage sudo access from ldap too.

Have you looked at Netflix's BLESS: https://github.com/Netflix/bless