Setting up a Bastion host on AWS

Thu, 18 May 2017 00:00:00 +0000

When setting up my latest development environment at AWS, I wanted to deploy all EC2 services on a private VPC and simply route all traffic to them through a Bastion host (aka jump host). AWS maintains a an excellent CloudFormation quickstart guide & template here and it’s what I used to get started. After completing that guide I put a new entry for the Bastion host in my ssh config like so:

Knock first firewall for AWS Security Groups

Tue, 16 May 2017 00:00:00 +0000

I recently setup a Bastion host to secure a development environment on AWS. The Bastion only exposes port 22 for SSH and I wanted to restrict access to a whitelist of authorized IP addresses rather than leave port 22 open to the internet. Further - I wanted to restrict 443 and 80 inbound to the development environment so that only authorized users/developers could access the pre-release builds deployed there.

AWS on technocracy

Setting up a Bastion host on AWS

Knock first firewall for AWS Security Groups