You often need to allow SSH and SCP protocol access to cloud and on-premises servers when performing maintenance tasks or troubleshooting problems. These protocols commonly require using an access server (for example, a Bastion host) and maintaining an open inbound port between a client and server, increasing your cost and security risk. With SSH protocol tunneling using Session Manager, you do not need an access server or an open inbound port for SSH-based access and SCP-based file copy. This reduces cost and improves your security posture when using SSH and SCP.