VPC - NATs vs Bastions

Question 1

NAT vs Bastion

Answer 1

NAT: routes traffic from Internet to EC2 instances in private subnets and is Linux, so can SSH but cannot RDP
Bastion: used to securely administer EC2 instances using SSH/RDP in private subnets

Question 2

Bastion use case

Answer 2

Administration only

Question 3

Scenario: how to make a bastion instance highly available?

Answer 3

Need multiple public subnets. can have a bastion in each public subnet. implement Autoscaling groups

Question 4

Bastion example

Answer 4

Think of the webserver created in the lab, where we ssh into public and then private instance