Today I built Amazon EC2 cloud sync into Bast. It syncs all accessible VMs into the UI. It connects by creating a temporary SSH key and uploading it to the guest agent via the native Amazon CLI. That means no keys are needed to be stored locally, and the permission to access the VM is handled by AWS’s own policies.