bless
An SSH Certificate Authority that runs as an AWS Lambda function for ephemeral, IAM-controlled SSH access.
What is bless?
BLESS is an SSH Certificate Authority that operates as an AWS Lambda function to sign SSH public keys. It solves the problem of managing SSH access at scale by issuing short-lived, IAM-restricted certificates instead of relying on static authorized_keys files or shared private keys. This provides a secure, auditable method for granting ephemeral SSH access to servers.
DevOps engineers and security teams managing SSH access in AWS environments, particularly those using bastion hosts or requiring fine-grained, IAM-integrated access controls.
Developers choose BLESS for its serverless, scalable design that integrates tightly with AWS IAM for authorization, eliminating key management overhead while providing short-lived certificates that enhance security. Its isolated deployment model protects CA keys, making it a robust solution for enterprise SSH access management.
Overview
Repository for BLESS, an SSH Certificate Authority that runs as a AWS Lambda function
Use Cases
Best For
- Securing SSH access to EC2 instances via IAM roles
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
