5 ms·
My fear is that if the VPN connection is severed, you're locked out of your environment. I typically have a public bastion and just shut it down. In AWS you ar
by jpdb 7y ago
My fear is that if the VPN connection is severed, you're locked out of your environment.
I typically have a public bastion and just shut it down. In AWS you aren't paying for it if it's turned off and you have an "escape hatch" if you need it.
If someone manages to launch another instance or start the stopped one then they would have access, but that's another can of worms.
- femto113 7y agoWith AWS, in an emergency you can always use the console to provision access of some sort: SSH bastion with a public IP, second VPN, etc. This definitely implies that explicit 2FA is needed for console access, but I’m pretty comfortable with using smartphones for that.