What Is a Bastion Host | Jump Host | Bastion Host Explained

[@GoCloudArchitects]

We hope you enjoyed the video, please share your thoughts below!

[@devendrajaisi1789]

You nailed this topic, generally, we get the information on where to put your bastion host but no one tells us how to secure it.

[@GoCloudArchitects]

@@devendrajaisi1789 thank you. I wanted to help clarify this to help others

[@Canda-fh4xc]

I believe you 100% right. But the question is, why AWS certifications keep presenting the Bastion Host as the best way to access EC2 instance in a private subnet !?

[@GoCloudArchitects]

Its the certification providers who spend so much time on bastion hosts. Working cloud architects and cloud security architects now not to make this mistake. Thats one of the many differences in whats taught in certification vs what customers actually use.

[@Canda-fh4xc]

@@GoCloudArchitects I passed 2 AWS certifications. Some of the answers in the test are either wrong or at least are not the best solution. But, you have to follow their rules or you will fail the exam.

[@MikeReacts1]

Agree 100%! Thanks for clarifying how vpn concentrators work.

[@GoCloudArchitects]

Thank you, Mike! I'm glad it was helpful! #cloudhired

[@GoCloudArchitects]

Register for the FREE Azure Bootcamp, bit.ly/4chG5or

[@bsummer]

Whats the difference between a bastion host and a dmz?

[@GoCloudArchitects]

A bastion host is an exposed system on the internet that provides a sback door to enable remote access. It is a serious security flaw and is an invitation to hackers to come and hack me. A demilitarized zone is a semi protected subnet, that offers access to one service like web services. The DMZ is a protected zone that protects the internal network from the web services.

[@bsummer]

@@GoCloudArchitects Thanks Mike for the clarification. I guess what's been glorified in boot camp and certification courses ain't the reality.

[@chrisadams27]

A lot to disagree with here.

[@preciousishiguzor3119]

Valid security remediations @Mike. Thank you for reinforcing the security best practices before a hacking event happens. The Security strategy is only as effective as the weakest link. I always remember that. Quality video and prompt feedback.

[@GoCloudArchitects]

Thank you so much for your comment, Precious! #cloudhired

[@pawansaarang]

Thanks @Mike for the great explanation about why Not to use Bastion Host. Wondering why organizations still use it. How can we verify if the Bastion Host we use, what level of security it has been implemented with?

[@GoCloudArchitects]

Pawan - honestly I have not seen a company use a bastion host in years. The companies that I worked with removed them about 20 years ago do to security risks. I have only seen this in certification courses. But then again there is a massive difference between certification and reality

[@pawansaarang]

@@GoCloudArchitects Thanks much Mike!!

[@Jkudjo]

@@GoCloudArchitects used in my company

[@GoCloudArchitects]

@@Jkudjo there are lots of cybersecurity breeches every day.

[@boscantus]

Thank you!

[@HuubvanEijndhovenConclusion]

In short: "A bastion host is an insecure system and therefore it is insecure. Duhhhh" Jeezzz...