Pivot with AWS SSM instead of SSH

With ssm:StartSession or SendCommand you get shells on instances without keys, ports, or touching the network.