how we can add aws ec2 instnace to Azure entra

Hi @N Wakchaure, Jagdish

Thank you for posting your query on Microsoft Q&A.

I understand that you are trying to add aws ec2 instnace to Azure entra and you want those instances to be authenticated using Azure Entra ID and also federate with another agency.

First you need to ensure that the users who are accessing are present in azure portal.

Add AWS IAM Identity Center from the gallery then Follow these steps to enable Microsoft Entra SSO

Upload metadata file. Once the metadata file is successfully uploaded, the Identifier and Reply URL values get auto populated in Basic SAML Configuration section.

Then you can access your ec2 instances and authenticate is done through Azure Entra Id.

For more information. Follow the link: https://zcusa.951200.xyz/en-us/entra/identity/saas-apps/aws-single-sign-on-tutorial#configure-aws-iam-identity-center-sso

Hope this helps. Do let us know if you have any further queries.

Thanks,

B. Siri Chandana.

Hi @N Wakchaure, Jagdish
Just checking in to see if above information was helpful. If you have any further updates on this issue, please feel free to post back.

Hi Chandana,

Do we need to setup the vpn tunnel between azure and AWS even if we setup above all the things that you have mentioned. Please let us know.

Regards

Jagdish

Hi @N Wakchaure, Jagdish

The setup of the VPN tunnel ensures secure communication between the two cloud environments over the public internet, using Internet Protocol Security encryption.

But in your environment you need not set up VPN if communication between Azure and AWS is secure and functional.

Hope this helps. Do let us know if you have any further queries.

Thanks,

B. Siri Chandana.