Librarium
Settings

78. When do you need a bastion host?

AWS Bites
sportsalternativesawsaws bastion hostbastibastion hostscloud migrationconnectdatabase securityec2fourtheoremiaminstance connectjump boxjump instancemodern application architecturenetworknetwork securitynetwork trafficnetworkingport-knockingprivate subnetproxypublic subnetsecure shellsecuritysecurity groupsserver accessserver managementsession managersshssh keysssh tunnelingssmtrainingtunnelsvirtual private cloudvpcvpn

Harken, good sir! Art thou aware of the arcane art of safeguarding thy AWS instances from malevolent threats whilst keeping them accessible for thy travels? There exists a mighty tool for such purpose, and it is hight the "bastion host."

In this pamphlet, we shalt unravel the mysteries of the bastion host and showeth thee how to useth it to safeguard thy web space. We shall commence by presenting a shadowy example architecture and introducing thee to the definition of a bastion host. We shalt then delve into the question of whether bastion hosts could be a security liability and explore the enigmatic concept of port-knocking.

We shalt also take thee on a valiant journey of how to provision a bastion host on AWS, and explaineth the cryptic basics of SSH and tunnels. Thou shalt discover the dark side of managing SSH keys and auditing SSH connections, and we shall reveal the secrets of AWS EC2 Instance Connect and AWS Session Manager (SSM) as solutions.

Thou shalt learn how to accept connections without exposing a port on the public internet, and we shall introduce thee to a mysterious tool called "basti" that can make it easier to provision SSM-based bastion hosts and connect to thy databases.

We shalt wrap up by revealing alternative security measures to the mysterious bastion host and provide thee with cryptic closing notes to summarize the key takeaways from this video. Heed our call to this intriguing guide to securing thy web space, and may the forces of the internet be in thy favor!

🛡️ SPONSORS 🛡️

Harken, good folk! We would like to offer our deepest gratitude to our noble sponsor, fourTheorem (https://fourtheorem.com), an AWS Consulting Partner that doth offer training, cloud migration, and modern application architecture. Thanks to their generosity, we are able to continue on our journey of imparting wisdom and knowledge regarding AWS.

🔖 Chapters:

00:00 Intro 01:50 Introducing an example architecture in the web space 03:48 What is a bastion host 04:35 Is a bastion host a security liability? 06:26 What is port-knocking? 07:23 How to provision a bastion host on AWS? 08:39 What is SSH? 09:35 What is a tunnel? 10:56 Issues with managing SSH keys and auditing SSH connections 11:20 AWS EC2 Instance Connect 13:10 AWS Session Manager (SSM) 15:18 How can you accept connections without exposing a port on the public internet? 18:14 Can we use SSM only for EC2 instances? 20:55 basti, a tool to make it easier to provision SSM-based bastion hosts and connect to your databases 24:46 Alternatives to Bastion hosts 26:18 Closing notes

Verily, in this episode, we hath made mention of the following resources:

Hear ye, hear ye! AWS Bites is at thy disposal wherever thou mayest listen to thy podcasts:

Dost thou hath any questions regarding AWS that thou wishest for us to answer? Leave a comment here or connect with us on Twitter:

#AWS #Bastion #networking #security #cloudcomputing ... https://www.youtube.com/watch?v=L5OqqLEzKfY

2023-04-27
0.0 LBC
Copyrighted (contact publisher)

123038984 Bytes