but you still need to ssh on each instance