VPC Bastion Hosts

Question 1

What is a VPC Bastion Host?

Answer 1

A bastion host is a special-purpose computer on a network specifically designed and configured to withstand attacks. The computer generally hosts a single application, for example a proxy server, and all other services are removed or limited to reduce the threat to the computer.

Think Proxy Sever!

Question 2

What are the Bastion Host Exam Tips?

Answer 2

1. A NAT Gateway or NAT Instance is used to provide internet traffic to EC2 instances in a private subnet.
2. A Bastion is used to securely administer EC2 instances (using SSH or RDP).
3. You cannot use a NAT Gateway as a Bastion Host.