title: Amazon EC2 Instance Connect for SSH - security group?
body: <p>I'm using the new (june 2019) <a href="https://aws.amazon.com/blogs/compute/new-using-amazon-ec2-instance-connect-for-ssh-access-to-your-ec2-instances/" rel="noreferrer">EC2 browser SSH connect feature</a> to shell into a EC2.  This is very convenient, since I'm on Windows and it's annoying to configure PuTTy with AWS auth and the legacy browser SSH offering never worked right for me.</p>
  
  <p>I can connect to an EC2 instance through AWS console as below</p>
  
  <p><a href="https://i.stack.imgur.com/CBbT6.png" rel="noreferrer"><img src="https://i.stack.imgur.com/CBbT6.png" alt="enter image description here"></a></p>
  
  <p>and it works perfectly if SSH is enabled for any IP address.  However, when I set SSH security group to my IP address, the SSH shell simply hangs.</p>
  
  <p><a href="https://i.stack.imgur.com/McEG7.png" rel="noreferrer"><img src="https://i.stack.imgur.com/McEG7.png" alt="enter image description here"></a></p>
  
  <p>I've confirmed this is my correct public IP address, and I've also tried with my private IPV4 address - no luck.  However, when setting the CIDR block to anywhere, the connection works fine.</p>
  
  <p><a href="https://i.stack.imgur.com/tSld0.png" rel="noreferrer"><img src="https://i.stack.imgur.com/tSld0.png" alt="enter image description here"></a></p>
  
  <p><a href="https://i.stack.imgur.com/KtG2K.png" rel="noreferrer"><img src="https://i.stack.imgur.com/KtG2K.png" alt="enter image description here"></a></p>
  
  <p>Figured maybe this new feature uses a proxy shell somewhere, so I'd have to allow access to the address of this intermediary.</p>
  
  <p>Am doing this from my home office desktop, not from an enterprise or sophisticated environment, and using my root AWS credentials (yes I know this is a worst-practice).</p>