Comment by poxrud

This is the best way to connect to your instances. However you still need the SSM agent installed and the right IAM permissions.