Bastion host service from AWS that supports multi cloud environments.

0

A customer is looking for bastion host service from AWS that supports multi cloud environments.

Please add your opinions on below:

  1. Normal EC2 can be provisioned as bastion host.
  2. Amazon EC2 Systems Manager - is there any blocker for multi-cloud environment?
1개 답변
0
수락된 답변

I would reframe the question about the function of the bastion host. If the goal is to provide secure, access-controlled, audited accesses to remote hosts, then the use of Session Manager (or other features of Systems Manager) can accomplish those goals.

One of the primary benefits of using Session Manager is that it obviates the need to open up SSH or RDP, which reduces an environment's attack surface and simplifies the infrastructure by eliminating a bastion setup.

See this blog for details (although it pre-dates Session Manager): https://aws.amazon.com/blogs/mt/replacing-a-bastion-host-with-amazon-ec2-systems-manager/.

AWS
답변함 4년 전
profile picture
전문가
검토됨 3일 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인