Based on http://travisjeffery.com/b/2015/11/ssh-into-ec2-instances-by-instance-id/
If you use VPCs, you'll probably need to adjust the --filter in the second aws ec2 describe-instances.
You may want to add -A to both of the ssh $ip, or maybe just alias ec2-ssh='ec2-ssh -A'.
| #!/usr/bin/env bash | |
| set -euo pipefail | |
| verbose=false | |
| profile= | |
| region= | |
| while [[ "$1" == -* ]] ; do | |
| if [ "$1" == -h ] ; then | |
| echo "usage: $(basename $0) [-p PROFILE] [-r REGION] [-v] instance-id" | |
| exit | |
| elif [ "$1" == -p ] ; then | |
| profile="--profile $2" | |
| shift ; shift | |
| elif [ "$1" == -r ] ; then | |
| region="--region $2" | |
| shift ; shift | |
| elif [ "$1" == -v ] ; then | |
| verbose=true | |
| shift | |
| else | |
| echo "$(basename $0): unrecognized argument $1" >&2 | |
| exit 1 | |
| fi | |
| done | |
| id="$1" | |
| shift | |
| read -r ip vpc <<<"$(aws ec2 describe-instances $profile $region --filter Name=instance-id,Values=$id | jq -r '.Reservations[0].Instances[0] | "\(.PrivateIpAddress) \(.VpcId)"')" | |
| if $verbose ; then | |
| echo connecting to $ip | |
| fi | |
| if [ $vpc == null ] ; then | |
| ssh $ip $@ | |
| else | |
| vpcip=$(aws ec2 describe-instances $profile $region --filter Name=tag:group,Values=jump Name=vpc-id,Values=$vpc | jq -r '.Reservations[0].Instances[0].PublicIpAddress') | |
| if $verbose ; then | |
| echo connecting via $vpcip | |
| fi | |
| ssh -At $vpcip ssh $ip $@ | |
| fi |