How to Implement Just-In-Time SSH Access for AWS EC2 (Stop Leaving Port 22 Open!)

The problem: Most EC2 instances have permanent SSH access. Port 22 is open to the world. Long-lived...