If we create a instance without public IP, if we don't have public key how can we connect to that instance.

I am best practice in creating and connect to the instance.

CodePudding user response：

if we don't have public key how can we connect to that instance.

You can use aws systems manager service Note:- ssm agent should be installed in the instance or the role should be attached to the instance with proper permissions.

here its the aws knowledge centre blog which clearly mentioned using aws systems manager is one of the best practices which ideally fits for your use case. https://aws.amazon.com/premiumsupport/knowledge-center/ec2-ssh-best-practices/

CodePudding user response：

As per best practices you should consider use of bastion host, Here is a blog which explains the architecture.

You can have your application related servers in the private subnet and the bastion host in public subnet, all the communications will be done through the bastion host.