environment – 3-tier architecture intro – alternative methods of resource connection: – Bastion host – SSM – EC2 Instance Connect – demo Why we should care? – brute force attacks – exploitation of security of failure solution two - ssm – to be precise AWS System Manager Session Manager – sessions based on secure bi-directional channel – traffic is encrypted with TLS 1.2ssm - props and cons – connection needs to be installed – configuration of Ansible is possible, however annoying(aka use Saltstack) ssm - costssolution three - EC2 Instance Connect – full name: EC2 Instance Connect Endpoint – SSH/RDP

SaveS- tate The VM state is being saved and the service must save relevant information using the SSM API (VBox/ssm.h). pfn- Load- State The VM is being restored from the saved state and the service must load

SaveS- tate The VM state is being saved and the service must save relevant information using the SSM API (VBox/ssm.h). pfn- Load- State The VM is being restored from the saved state and the service must load

provides a tree structure which holds configuration set- tings for the VM and all emulated devices. • SSM (Saved State Manager), saves and loads VM state. • VUSB (Virtual USB), a USB layer which separates fix for handling certain MSRs on ancient CPUs without VT-x support for MSR bitmaps • VMM: fixed VERR_SSM_LOAD_CPUID_MISMATCH errors when restoring a saved state with SMP guests on hosts without the CPUID/HTT VERR_SVM_UNEXPECTED_EXIT while intercepting debug register accesses (AMD-V only; bug #12481) • VMM: fixed a VERR_SSM_STRUCTURE_MAGIC error when trying to load a saved state made with VBox 4.3.4 when VT-x/AMD-V is disabled

provides a tree structure which holds configuration set- tings for the VM and all emulated devices. • SSM (Saved State Manager), saves and loads VM state. • VUSB (Virtual USB), a USB layer which separates fix for handling certain MSRs on ancient CPUs without VT-x support for MSR bitmaps • VMM: fixed VERR_SSM_LOAD_CPUID_MISMATCH errors when restoring a saved state with SMP guests on hosts without the CPUID/HTT VERR_SVM_UNEXPECTED_EXIT while intercepting debug register accesses (AMD-V only; bug #12481) • VMM: fixed a VERR_SSM_STRUCTURE_MAGIC error when trying to load a saved state made with VBox 4.3.4 when VT-x/AMD-V is disabled

provides a tree structure which holds configuration set- tings for the VM and all emulated devices. • SSM (Saved State Manager), saves and loads VM state. • VUSB (Virtual USB), a USB layer which separates VERR_SVM_UNEXPECTED_EXIT while intercepting debug register accesses (AMD-V only; bug #12481) • VMM: fixed a VERR_SSM_STRUCTURE_MAGIC error when trying to load a saved state made with VBox 4.3.4 when VT-x/AMD-V is disabled when a machine had immutable or writethrough storage attached (bug #5727) • Saved state: fixed VERR_SSM_LOADED_TOO_MUCH error when loading DisplayScreen- shot(bug #6162) • VBoxManage: add restorecurrent

SaveS- tate The VM state is being saved and the service must save relevant information using the SSM API (VBox/ssm.h). pfn- Load- State The VM is being restored from the saved state and the service must load

SaveS- tate The VM state is being saved and the service must save relevant information using the SSM API (VBox/ssm.h). pfn- Load- State The VM is being restored from the saved state and the service must load

SaveS- tate The VM state is being saved and the service must save relevant information using the SSM API (VBox/ssm.h). pfn- Load- State The VM is being restored from the saved state and the service must load

SaveS- tate The VM state is being saved and the service must save relevant information using the SSM API (VBox/ssm.h). pfn- Load- State The VM is being restored from the saved state and the service must load