Open-sourcing awsjail - a login shell that only accepts aws ... commands. Users use standard SSH, land at an awsjail:<account-id>:<user> > prompt instead of bash, and can run scoped AWS CLI commands and nothing else. No shell or OS command access, no keys handed out, no internet access from the terminal with every command logged.
