亚马逊AWS官方博客

Category: Security, Identity, & Compliance

Farewell to Bastion Hosts: Achieving Secure and Intelligent Operations for Private Subnets Using AWS EICE (EC2 Instance Connect Endpoint) and Chaterm

This article introduces the integration of Chaterm, an AI-powered terminal tool, with AWS EC2 Instance Connect Endpoint(EICE) to address operational challenges in private subnets. Traditional approaches require VPNs or bastion hosts,whereas EICE leverages IAM-based authentication to establish secure connections without public IP addresses. Chaterm wraps the EICE capability with cross-platform auto-adaptation and a visual interface. More importantly, its built-in AI Agent can perform intelligent health checks, fault diagnosis, and batch management directly on private EC2 instances —significantly improving both operational efficiency and security.

告别堡垒机：使用 AWS EICE （EC2 Instance Connect Endpoint） 与 Chaterm 实现私有子网的安全智能运维

本文介绍了Chaterm智能终端工具与AWS EC2 Instance Connect Endpoint (EICE)的集成方案，用于解决私有子网运维难题。传统方案需要VPN或跳板机，而EICE通过IAM身份认证实现无公网IP的安全连接。Chaterm封装了EICE能力，提供跨平台自动适配和可视化操作界面，更重要的是内置AI Agent可直接对私网EC2进行智能巡检、故障诊断和批量管理，大幅提升运维效率和安全性。

AWS Security Hub Extended 通过精选合作伙伴解决方案提供全栈企业级安全防护

今天，我们宣布推出 AWS Security Hub Extended。该计划简化了全栈企业级安全解决方案的采购、部署和集成流程，覆盖端点、身份、邮件、网络、数据、浏览器、云、AI 和安全运营等各个领域。借助 Extended 计划，您可以将安全防护能力扩展至 AWS 外部，通过精选 AWS 合作伙伴解决方案来帮助保护您的企业资产，包括 7AI、Britive、CrowdStrike、Cyera、Island、Noma、Okta、Oligo、Opti、Proofpoint、SailPoint、Splunk（思科旗下公司）、Upwind、Zscaler 等。

Building an Impregnable Fortress for Digital Assets: How Chaterm Leverages AWS KMS Envelope Encryption to Create a Zero-Trust Security Architecture

This document delves into the core principles and security advantages of AWS KMS (Key Management Service) and Envelope Encryption—modern, enterprise-grade data protection technologies. We will demonstrate how Chaterm utilizes these technologies to construct a three-tier key architecture, achieving end-to-end data security and providing bank-level protection for sensitive digital assets such as user SSH keys and server configurations.

构建数字资产的铜墙铁壁：Chaterm 如何利用亚马逊云科技 KMS 信封加密技术打造零信任安全架构

本文深入介绍了 亚马逊云科技 KMS (Key Management Service) 以及信封加密 (Envelope Encryption) 这一现代企业级数据保护技术的核心原理和安全优势。我们将展示 Chaterm 是如何运用这些技术构建三层密钥架构，实现数据的端到端安全，为用户的 SSH 密钥、服务器配置等敏感数字资产提供银行级别的安全保护。

← Older posts
Newer posts →