allow different image for aws_cdk.aws_ec2.BastionHostLinux

[nzspambot]

Currently aws_cdk.aws_ec2.BastionHostLinux is hardcoded for:

Parameters:
  SsmParameterValueawsserviceamiamazonlinuxlatestamzn2amihvmx8664gp2C96584B6F00A464EAD1953AFF4B05118Parameter:
    Type: AWS::SSM::Parameter::Value<AWS::EC2::Image::Id>
    Default: /aws/service/ami-amazon-linux-latest/amzn2-ami-hvm-x86_64-gp2

it would be nice to be able to provide your own AWS::SSM::Parameter::Value as we build per-hardened AMIs

Use Case

we build per-hardened updated AMIs with security tools installed which we would use

Proposed Solution

Add a parameter such as ssm_parameter to allow this to be used

• 👋 I may be able to implement this feature request
• ⚠️ This feature might incur a breaking change

---

This is a 🚀 Feature Request

[nzspambot]

One thing I forgot to think about 🙄 was how to cater for the user data given say of the ami is not amazon linux?

[cokia]

aws-cdk/packages/@aws-cdk/aws-ec2/lib/bastion-host.ts

Line 68 in fdd157d

readonly machineImage?: IMachineImage;

I think this is already defined.

However, the test code for this has been confirmed to not exist, so it remains to be seen whether it works.

Do we need a test code for this?

[github-actions]

This issue has not received any attention in 1 year. If you want to keep this issue open, please leave a comment below and auto-close will be canceled.