How to Use Magento Cloud SSH for Secure Remote Connections?

• What is Magento Cloud SSH?

• Features of Magento Cloud SSH for Secure Connections to Remote Environments

• 2 Methods to Add an SSH Public Key to Your Adobe Commerce Account on Cloud Infrastructure

• 2 Ways to Connect to a Remote Environment

• Best Practices for Secure SSH Connections in Magento Cloud

• Troubleshooting Common SSH Issues in Magento Cloud

• FAQs

• Summary

What is Magento Cloud SSH?

Magento Cloud SSH is a secure way to connect to remote environments. It encrypts connections using the Secure Shell (SSH) protocol.

Magento cloud SSH ensures safe access to Adobe Commerce cloud servers. You can use SSH to manage applications and retrieve logs. It also helps perform server-related tasks securely. Adobe only supports sFTP connections through SSH public keys. FTP connections are not allowed, as Adobe prioritizes secure methods.

To use Magento Cloud SSH, you need to generate an SSH key pair. This key pair includes a public key and a private key. The public key is shared to grant access. The private key stays secure on your device. SSH keys allow access without entering credentials repeatedly. They also help connect to GitHub to manage source code. This setup makes server management simple and secure.

Features of Magento Cloud SSH for Secure Connections to Remote Environments

Feature	Explanation
Secure Connection Protocol	Magento Cloud SSH uses the SSH protocol to secure connections. It encrypts all data during transmission. It prevents unauthorized access to cloud servers. The protocol ensures safe communication for managing applications. It is a trusted standard for secure remote connections.
Public and Private Key Authentication	Magento Cloud SSH requires an SSH key pair for access. The public key is shared to grant access. The private key stays secure on your device. It eliminates the need for passwords. Key-based authentication enhances security and reduces risks.
sFTP Support	Adobe supports only sFTP connections using SSH public keys. It ensures secure file transfers between local and remote environments. FTP connections are not allowed. sFTP encrypts data during transmission, offering better protection. It is a modern and safer method for file management.
Simplified Access	Magento SSH keys provide easy access without repeated logins. It saves time for routine tasks like managing servers or retrieving logs. It reduces risks associated with password-based access. The setup is convenient and secure for users. This feature enhances efficiency without compromising safety.
GitHub Integration	Magento Cloud SSH supports GitHub access using SSH keys. Developers can push and pull code securely without using passwords. It streamlines source code management and workflows. It ensures secure communication with repositories. It is essential for efficient development in cloud environments.
Remote Log Access	SSH allows secure access to remote environment logs. You can view and analyze logs without exposing sensitive data. It helps identify and resolve issues efficiently. The logs remain encrypted during access. It ensures data safety while managing applications.
SSH Tunneling	SSH supports secure tunneling for encrypting sensitive connections. It allows you to forward data between local and remote servers safely. It is useful for accessing cloud services securely. Tunneling protects traffic from being intercepted. It adds another layer of security to your environment.
Customizable SSH Key Setup	Magento Cloud SSH allows creating custom SSH key pairs. You can set up keys on multiple devices and workspaces. It ensures flexible and secure access for your team. Public keys can be managed to control access. It makes secure connections adaptable to your needs.
Enhanced Data Security	Magento Cloud SSH encrypts all data exchanged with cloud servers. It prevents eavesdropping and theft during transmission. It protects sensitive information like credentials and files. The protocol meets modern security standards. It ensures your data stays safe during remote management.
FTP Replacement	Magento Cloud SSH replaces outdated FTP connections with sFTP. Traditional FTP lacks encryption and is prone to attacks. sFTP ensures encrypted and safe file transfers. It protects sensitive files from interception. It is a secure and reliable method for file management.

2 Methods to Add an SSH Public Key to Your Adobe Commerce Account on Cloud Infrastructure

1. Add SSH Key Using CLI

Open your local workstation and go to your project directory. Log in to your project by running:

magento-cloud login

Add the public key using the command:

magento-cloud ssh-key:add ~/.ssh/id_rsa.pub

The key will be added, allowing secure access to your project.

2. Add SSH Key Using Console

a. Add SSH Key to a New Project

1. Log in to the Magento Cloud Console.

2. Locate and click the No SSH key icon near the command field.

3. Copy your public SSH key and paste it into the Public Key field.

4. Follow the prompts to complete the setup.

b. Add SSH Key to Cloud Profile

1. Log in to the Cloud Console.

2. In the top-right menu, select My Profile.

3. In the SSH Keys view, click Add Public Key.

4. Enter a title in the Title field and paste the public key in the Key field.

5. Click Save to finalize the process.

Both methods enable secure access to your Adobe Commerce account. Choose the one that best fits your workflow.

2 Ways to Connect to a Remote Environment

1. Connect Using Cloud CLI

Open your local workstation and go to your project directory. List all environments in your project using the command:

magento-cloud environment:list -p <project-ID>

Use the SSH command to log in to the remote environment:

magento-cloud ssh -p <project-ID> -e <environment-ID>

You will now be connected to the remote integration environment.

2. Connect Using an SSH Command

• Log in to the Cloud Console.

• Select your project from the All Projects list.

• Choose the environment you want to connect to.

• Click SSH to access the SSH tab.

• Click the copy button to copy the full SSH command.

• Open a terminal and paste the SSH command to connect. Example command:

  ssh abcdefg123abc-branch-a12b34c--mymagento@ssh.us-2.magento.cloud

Both methods provide secure access to your remote environment. Choose the one that suits your workflow best.

Best Practices for Secure SSH Connections in Magento Cloud

Practice	Explanation
Use Strong SSH Key Pair	Always generate a strong SSH key pair for authentication. Ensure the private key is stored securely. Avoid sharing it with anyone. Use a key length of at least 2048 bits for better security. Regularly rotate keys for enhanced protection.
Restrict SSH Key Access	Limit access to only authorized users and devices. Add public keys to trusted servers only. Avoid sharing keys with multiple users. It minimizes the risk of unauthorized access.
Disable Password Authentication	Use key-based authentication instead of passwords. Passwords are more vulnerable to brute-force attacks. Key-based methods provide stronger security. It ensures only verified keys can connect.
Regularly Update SSH Keys	Remove unused or old keys from the system. Regularly review and update the list of authorized keys. It reduces the chances of forgotten keys being exploited. Keep key usage under strict monitoring.
Enable SSH Tunneling for Sensitive Data	Use SSH tunneling for transferring sensitive data securely. It encrypts all traffic during transmission. It prevents data interception by unauthorized parties. SSH tunneling is essential for secure remote access.
Monitor SSH Activity	Keep track of all SSH login attempts and activities. Use Magento logs to detect any unusual behavior. Monitoring helps identify potential breaches early. It ensures proactive security measures.
Use sFTP Instead of FTP	Avoid traditional FTP connections as they are insecure. Always use sFTP for file transfers. sFTP encrypts data, ensuring it stays protected during transmission. It reduces vulnerability to cyber threats.

Troubleshooting Common SSH Issues in Magento Cloud

1. SSH Key Not Recognized

• Ensure the public key is correctly added to the Cloud Console.

• Verify the key format is OpenSSH and not another type.

• Check if the private key is stored in the correct .ssh directory.

• Confirm the permissions for your .ssh folder and key files are secure.

• Regenerate the key if it is corrupt or outdated.

2. Permission Denied Errors

• Verify you are using the correct project ID and environment ID.

• Ensure your user account has access to the Magento Cloud project.

• Check that the public key is associated with your account.

• Confirm the server allows connections from your IP address.

• Restart the SSH service on your local machine if needed.

3. Connection Timeout

• Check your internet connection to ensure it is stable.

• Verify the Magento Cloud server is not under maintenance or downtime.

• Confirm the correct server address is being used in the SSH command.

• Increase the timeout limit in your SSH configuration Magento.

• Use the ping command to test connectivity to the server.

4. Invalid SSH Command

• Double-check the syntax of the SSH command you are using.

• Ensure you are using the correct project and environment identifiers.

• Confirm the Cloud CLI is installed and up to date.

• Use the copy command from the Cloud Console to avoid errors.

• Verify your terminal or CLI tool supports SSH commands.

5. Key Pair Issues

• Confirm both the public and private keys are present and match.

• Ensure the private key file is not corrupted or missing.

• Regenerate a new key pair if needed and update the Cloud Console.

• Use the correct key file path in your SSH command.

• Make sure the key file is not encrypted with a passphrase, or provide it when prompted.

6. Access Denied to Environment

• Verify the environment is active and not deleted or suspended.

• Check if your user role has access to the specific environment.

• Confirm the environment name or ID is correctly entered.

• Ensure the SSH key is associated with the environment.

• Contact Magento Cloud support if access is still denied.

7. Errors with sFTP Connections

• Ensure you are using sFTP and not FTP.

• Verify the key pair is set up for sFTP access.

• Check the sFTP port is open and reachable.

• Confirm the server details in your sFTP client are accurate.

• Test the connection using an SSH command to rule out broader issues.

FAQs

1. What is Magento 2 SSH access used for?

Magento 2 SSH access is used to securely connect to cloud environments. It helps manage applications, retrieve logs, and perform server tasks. SSH access encrypts connections for better security. It replaces less secure methods like FTP.

2. How do I set up Magento 2 SSH access using CLI commands?

Generate an SSH key pair on your local system. Add the public key using the command: magento-cloud ssh-key:add ~/.ssh/id_rsa.pub. Log in to your project with magento-cloud login. This setup allows secure access to the cloud environment.

3. Can CLI commands list all environments for SSH access in Magento 2?

Yes, use magento-cloud environment:list -p <project-ID> to list environments. This command shows all available environments for SSH access. Use it to identify the environment ID for the connection. It simplifies the workflow for developers.

4. How do I connect to a Magento 2 environment using SSH?

Run magento-cloud ssh -p <project-ID> -e <environment-ID> in your terminal. This CLI command connects you to the specified environment. Ensure your SSH key is set up before connecting. Use it for secure server management tasks.

5. Why does Magento 2 use SSH access over FTP?

Magento 2 uses SSH access for enhanced security. FTP lacks encryption and is vulnerable to attacks. SSH encrypts data and supports sFTP for safe file transfers. It, with dedicated Magento hosting, ensures secure communication during server management.

Summary

Magento Cloud SSH simplifies remote management while prioritizing security. Here are the key benefits of using Magento Cloud SSH:

• Encrypted Connections: Protect data during transmission.

• sFTP Support: Replace insecure FTP with safe file transfers.

• Efficient Access: Manage servers without repeated logins.

• GitHub Integration: Securely handle source code via SSH.

• Troubleshooting Guidance: Resolve common SSH problems effectively.

Consider Managed Magento Hosting to have a secure and performance-driven Magento store.