One option
14. Systems Manager Session Manager
During a design review, the team identifies this need: secure shell-like instance access without inbound SSH. Which AWS service or concept is the most direct fit?