Aws-Cli on i break software - My work with different software, bug hunting and interesting tidbits. /tags/aws-cli/ Recent content in Aws-Cli on i break software - My work with different software, bug hunting and interesting tidbits. Hugo en-us Fri, 11 Sep 2026 12:50:29 +0530 awsjail: An AWS-Only Login Shell for SSH Bastions /2026/09/awsjail-an-aws-only-login-shell-for-ssh-bastions/ Mon, 07 Sep 2026 00:00:00 +0000 /2026/09/awsjail-an-aws-only-login-shell-for-ssh-bastions/ <p>Open-sourcing awsjail - a login shell that only accepts <code>aws ...</code> commands. Users use standard SSH, land at an <code>awsjail:&lt;account-id&gt;:&lt;user&gt; &gt;</code> prompt instead of bash, and can run scoped AWS CLI commands and nothing else. No shell or OS command access, no keys handed out, no internet access from the terminal with every command logged.</p>