Use aws identities and policies to control ssh access to ec2 instances https://aws.amazon.com/about-aws/whats-new/2019/06/introduci...

Has some quirks but might be useful for companies using ec2 instances.