The author seems to have a solution to sell so that puts me on alert, but this is the only post I could find suggesting bastion hosts are not a good idea. This

The author seems to have a solution to sell so that puts me on alert, but this is the only post I could find suggesting bastion hosts are not a good idea. This HN thread has a lot of back and forth on bastions vs VPNs: https://news.ycombinator.com/item?id=8637154 https://news.ycombinator.com/item?id=8637154 Basically, I'm trying to migrate our bare metal servers into an AWS and am looking for best practices. I've more or less followed this guide so far: http://blog.bwhaley.com/reference-vpc-architecture http://blog.bwhaley.com/reference-vpc-architecture