Many of the cloud breaches happen because of misconfiguration or too wide permissions. Usually, I recommend the creation of all instances in private subnets, and if they are needed to be exposed to the internet use a load balancer in front of the private IP. In this video, I will create a new linux Instance, in a private subnet, enable the Bastion plugin and connect to it using ssh.
Step by step guide on how to enable the bastion service can be found here.
learnoci.cloud/how-to-create-...
3 июн 2022