VPC - NATs vs Bastions

Question 1

NAT vs Bastion

Answer 1

NAT: routes traffic from Internet to EC2 instances in private subnets and is Linux, so can SSH but cannot RDP Bastion: used to securely administer EC2 instances using SSH/RDP in private subnets

Question 2

Bastion use case

Answer 2

Administration only

Question 3

Name the techniques to make a Bastion instance highly available?

Answer 3

1. Create multiple Public Subnets.
2. Deploy a Bastion in each Public Subnet.
3. Implement Autoscaling Groups.

Question 4

Bastion example

Answer 4

Think of the webserver created in the lab, where we ssh into public and then private instance

Question 5

Can a NAT Gateway be used as a Bastion host?

Answer 5

No