Bastion host service from AWS that supports multi cloud environments.

0

A customer is looking for bastion host service from AWS that supports multi cloud environments.

Please add your opinions on below:

  1. Normal EC2 can be provisioned as bastion host.
  2. Amazon EC2 Systems Manager - is there any blocker for multi-cloud environment?
1 réponse
0
Réponse acceptée

I would reframe the question about the function of the bastion host. If the goal is to provide secure, access-controlled, audited accesses to remote hosts, then the use of Session Manager (or other features of Systems Manager) can accomplish those goals.

One of the primary benefits of using Session Manager is that it obviates the need to open up SSH or RDP, which reduces an environment's attack surface and simplifies the infrastructure by eliminating a bastion setup.

See this blog for details (although it pre-dates Session Manager): https://aws.amazon.com/blogs/mt/replacing-a-bastion-host-with-amazon-ec2-systems-manager/.

AWS
répondu il y a 4 ans
profile picture
EXPERT
vérifié il y a 3 jours

Vous n'êtes pas connecté. Se connecter pour publier une réponse.

Une bonne réponse répond clairement à la question, contient des commentaires constructifs et encourage le développement professionnel de la personne qui pose la question.

Instructions pour répondre aux questions