Last Updated: November 21, 2025
Focus Areas
| Focus |
|---|
Limit inbound IPs to bastion
|
Log bastion session commands
|
Commands & Queries
ssh -J bastion user@host
Proxy through bastion
aws ec2-instance-connect send-ssh-public-key
Provision key
journalctl -u sshd
Review logs
Summary
Bastions keep real hosts shielded behind controls.
💡 Pro Tip:
Audit jump host sessions and rotate keys monthly.