A company wants to improve its security and audit posture by limiting Amazon EC2 inbound access.
What should the company use to access instances remotely instead of opening inbound SSH ports and managing SSH keys?
EC2 key pairs
AWS Systems Manager Session Manager
AWS Identity and Access Management (IAM)
Network ACLs
Explanations:
EC2 key pairs are used for SSH authentication but do not address limiting inbound access directly.
AWS Systems Manager Session Manager allows secure remote access to EC2 instances without needing to open inbound SSH ports.
IAM is used for managing permissions and access but does not provide remote access capabilities for EC2 instances.
Network ACLs can restrict inbound access, but they do not provide a means for remote access like Session Manager does.
I systematize that the answer is:
AWS Systems Manager Session Manager