diff --git a/pkgs/by-name/az/azure-cli/extensions-manual.nix b/pkgs/by-name/az/azure-cli/extensions-manual.nix
index a1f495cd2f9e..f81e61ea2ec9 100644
--- a/pkgs/by-name/az/azure-cli/extensions-manual.nix
+++ b/pkgs/by-name/az/azure-cli/extensions-manual.nix
@@ -60,6 +60,22 @@
     meta.maintainers = with lib.maintainers; [ obreitwi ];
   };
 
+  ssh = mkAzExtension rec {
+    pname = "ssh";
+    version = "2.0.5";
+    url = "https://azcliprod.blob.core.windows.net/cli-extensions/ssh-${version}-py3-none-any.whl";
+    sha256 = "80c98b10d7bf1ce4005b7694aedd05c47355456775ba6125308be65fb0fefc93";
+    description = "SSH into Azure VMs using RBAC and AAD OpenSSH Certificates";
+    propagatedBuildInputs = (
+      with python3Packages;
+      [
+        oras
+        oschmod
+      ]
+    );
+    meta.maintainers = with lib.maintainers; [ gordon-bp ];
+  };
+
   storage-preview = mkAzExtension rec {
     pname = "storage-preview";
     version = "1.0.0b2";