Skip to content

Bastion HostsΒΆ

  • We can use a Bastion Host to [[SSH]] into our [[private instance]]s
  • The bastion is in the [[public subnet]] which is then connected to all other [[private subnet]]s
  • Bastion Host security group must be tightened

Tip: Make sure the bastion host port only has 22 traffic from the IP you need, not from the security groups of your other instances.