cloudx-proxy 0.4.4__py3-none-any.whl → 0.4.5__py3-none-any.whl

cloudx_proxy/_version.py

@@ -17,5 +17,5 @@ __version__: str
 __version_tuple__: VERSION_TUPLE
 version_tuple: VERSION_TUPLE
 
-__version__ = version = '0.4.4'
-__version_tuple__ = version_tuple = (0, 4, 4)
+__version__ = version = '0.4.5'
+__version_tuple__ = version_tuple = (0, 4, 5)

cloudx_proxy/setup.py

@@ -224,15 +224,21 @@ class CloudXSetup:
                 self.print_status("Invalid input", False, 2)
                 return False
             
-            # Create a title for the 1Password item
-            ssh_key_title = f"cloudX SSH Key - {self.ssh_key}"
+            # Create possible title variations for the 1Password item
+            ssh_key_title_with_prefix = f"cloudX SSH Key - {self.ssh_key}"
+            ssh_key_title_without_prefix = self.ssh_key
             
-            # Check if a key with this title already exists in 1Password
+            # Check if a key with either title exists in 1Password
             ssh_keys = list_ssh_keys()
-            existing_key = next((key for key in ssh_keys if key['title'] == ssh_key_title), None)
+            
+            # First check for our prefixed format, then for a plain key with the same name
+            existing_key = next((key for key in ssh_keys if key['title'] == ssh_key_title_with_prefix), None)
+            if not existing_key:
+                existing_key = next((key for key in ssh_keys if key['title'] == ssh_key_title_without_prefix), None)
             
             if existing_key:
-                self.print_status(f"SSH key '{ssh_key_title}' already exists in 1Password", True, 2)
+                key_title = existing_key['title']
+                self.print_status(f"SSH key '{key_title}' already exists in 1Password", True, 2)
                 # Get the public key
                 result = subprocess.run(
                     ['op', 'item', 'get', existing_key['id'], '--fields', 'public key'],
@@ -249,8 +255,8 @@ class CloudXSetup:
                         return True
             else:
                 # Create a new SSH key in 1Password
-                self.print_status(f"Creating new SSH key '{ssh_key_title}' in 1Password...", None, 2)
-                success, public_key, item_id = create_ssh_key(ssh_key_title, selected_vault)
+                self.print_status(f"Creating new SSH key '{ssh_key_title_with_prefix}' in 1Password...", None, 2)
+                success, public_key, item_id = create_ssh_key(ssh_key_title_with_prefix, selected_vault)
                 
                 if not success:
                     self.print_status("Failed to create SSH key in 1Password", False, 2)

{cloudx_proxy-0.4.4.dist-info → cloudx_proxy-0.4.5.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.2
 Name: cloudx-proxy
-Version: 0.4.4
+Version: 0.4.5
 Summary: SSH proxy command to connect VSCode with Cloud9/CloudX instance using AWS Systems Manager
 Author-email: easytocloud <info@easytocloud.com>
 License: MIT License
@@ -224,6 +224,30 @@ When adding new instances to an existing environment, you can choose to:
 
 This three-tier structure offers better maintainability by reducing duplication and making it clear which settings apply broadly and which are specific to an environment or host.
 
+### Security Model: AWS and SSH Integration
+
+cloudX-proxy implements a unique dual-layer security approach that combines AWS's robust authentication mechanisms with SSH's connection handling capabilities:
+
+#### AWS Security Layer (Primary)
+The primary security boundary is enforced through AWS Systems Manager (SSM) and EC2 Instance Connect. This layer provides:
+- **Access Control**: Only authenticated AWS users with appropriate IAM permissions can establish SSM sessions
+- **Dynamic Key Authorization**: EC2 Instance Connect allows temporary injection of SSH public keys, valid only for a single session
+- **Network Security**: No inbound SSH ports need to be exposed, as all connections are established through AWS SSM's secure tunneling
+- **Audit Trail**: All connection attempts and key pushes are logged in AWS CloudTrail
+
+#### SSH Layer (Secondary)
+SSH serves primarily as a connection handler rather than the main security mechanism:
+- **Ephemeral Authentication**: The SSH key pair is used only to establish the connection through the SSM tunnel
+- **Session Management**: SSH handles the actual terminal session, file transfers, and multiplexing
+- **Key Flexibility**: Since keys are pushed dynamically for each session, the same key can safely be used across multiple instances
+- **Zero Trust Model**: Even if a key is compromised, access still requires valid AWS credentials and permissions
+
+This architecture means that:
+1. The security of the connection relies primarily on AWS IAM permissions and SSM session management
+2. SSH keys can be reused across instances without security implications
+3. Each connection gets a fresh key authorization through EC2 Instance Connect
+4. Instances remain completely closed to direct SSH access from the internet
+
 ### VSCode Configuration
 
 1. Install the "Remote - SSH" extension in VSCode

cloudx_proxy-0.4.5.dist-info/RECORD

@@ -0,0 +1,12 @@
+cloudx_proxy/_1password.py,sha256=uxyCfVvO1eQrOfYRojst_LN2DV4fIwxM5moaQTn3wQY,5853
+cloudx_proxy/__init__.py,sha256=ZZ2O_m9OFJm18AxMSuYJt4UjSuSqyJlYRaZMoets498,61
+cloudx_proxy/_version.py,sha256=YrJwLVAkXjdo87YWYyrI7_B7BOSjbDIJ_FAFmb7g_vc,511
+cloudx_proxy/cli.py,sha256=5IcfYFACUOa4pqSKuHucqZionI9P8n5ZLvtzyXYeTvw,4218
+cloudx_proxy/core.py,sha256=RF3bX5MQiokRKjYEPnfWdKywGdtoVUvV2xZqm9uOl1g,8135
+cloudx_proxy/setup.py,sha256=TMFSo3-RusvQ5G7_I0vUPtZG18yDnogQbRDxGxVtNnM,38632
+cloudx_proxy-0.4.5.dist-info/LICENSE,sha256=i7P2OR4zsJYsMWcCUDe_B9ZfGi9bU0K5I2nKfDrW_N8,1068
+cloudx_proxy-0.4.5.dist-info/METADATA,sha256=heC8F4kGgkmgSy-8SdqpgsKsGZ27N3xNkZI8wR3nogw,18522
+cloudx_proxy-0.4.5.dist-info/WHEEL,sha256=jB7zZ3N9hIM9adW7qlTAyycLYW9npaWKLRzaoVcLKcM,91
+cloudx_proxy-0.4.5.dist-info/entry_points.txt,sha256=HGt743N2lVlKd7O1qWq3C0aEHyS5PjPnxzDHh7hwtSg,54
+cloudx_proxy-0.4.5.dist-info/top_level.txt,sha256=2wtEote1db21j-VvkCJFfT-dLlauuG5indjggYh3xDg,13
+cloudx_proxy-0.4.5.dist-info/RECORD,,

cloudx_proxy-0.4.4.dist-info/RECORD

@@ -1,12 +0,0 @@
-cloudx_proxy/_1password.py,sha256=uxyCfVvO1eQrOfYRojst_LN2DV4fIwxM5moaQTn3wQY,5853
-cloudx_proxy/__init__.py,sha256=ZZ2O_m9OFJm18AxMSuYJt4UjSuSqyJlYRaZMoets498,61
-cloudx_proxy/_version.py,sha256=rQpExgwkkSMYhPbtDdfhSejoe7mM9tgzyWoNno0mgIw,511
-cloudx_proxy/cli.py,sha256=5IcfYFACUOa4pqSKuHucqZionI9P8n5ZLvtzyXYeTvw,4218
-cloudx_proxy/core.py,sha256=RF3bX5MQiokRKjYEPnfWdKywGdtoVUvV2xZqm9uOl1g,8135
-cloudx_proxy/setup.py,sha256=11DsAVt6L4d3VmuJNpU07-QdF3FwahOUpJyLDksMeaE,38216
-cloudx_proxy-0.4.4.dist-info/LICENSE,sha256=i7P2OR4zsJYsMWcCUDe_B9ZfGi9bU0K5I2nKfDrW_N8,1068
-cloudx_proxy-0.4.4.dist-info/METADATA,sha256=22Yrnn7514Dd8eYte1c03xXpSjMhgATvwIftn1A95iQ,16757
-cloudx_proxy-0.4.4.dist-info/WHEEL,sha256=jB7zZ3N9hIM9adW7qlTAyycLYW9npaWKLRzaoVcLKcM,91
-cloudx_proxy-0.4.4.dist-info/entry_points.txt,sha256=HGt743N2lVlKd7O1qWq3C0aEHyS5PjPnxzDHh7hwtSg,54
-cloudx_proxy-0.4.4.dist-info/top_level.txt,sha256=2wtEote1db21j-VvkCJFfT-dLlauuG5indjggYh3xDg,13
-cloudx_proxy-0.4.4.dist-info/RECORD,,