🔶 Bye bye bastion hosts...Hello AWS IAM!

How Segment got rid of SSH bastion hosts, reducing cost, complexity, and maintenance of their infrastructure, as well as eliminating the need to distribute SSH Keys. Last but not least, they reduced their attack surface by not having any SSH port open to the world.

https://segment.com/blog/infrastructure-access/

#aws