Kill Your Bastions

Bastion servers have been a staple of cloud environments. It’s time to remove them. In late 2025 there is no need to run a bastion server in an AWS environment. Origin of Bastions in Cloud Before we had bastions, teams would open up SSH on most if not all of their servers to the internet. If an engineer's home internet used dynamic IP addresses, IP restrictions were skipped. It wasn't uncommon for…