session manager

SSM agent and command = SSH without SSH, supports all platforms, logged. Because of the agent

IAM can used to secure the access You can even restrict the commands that a user can run requires no port but a server dependency

Session will be logged