4 ms·
I'm maintaining Basti, an open-source AWS Bastion Host management CLI that lets you connect to RDS and other resources at almost no cost. Check it out: https://
by BohdanPetryshyn 2y ago
I'm maintaining Basti, an open-source AWS Bastion Host management CLI that lets you connect to RDS and other resources at almost no cost. Check it out: https://github.com/basti-app/basti https://github.com/basti-app/basti
This project also inspired me to explore a commercial analytics solution for CLI applications — currently assessing if there's demand for it.
- matthiasb 2y agoIt looks interesting. Is the Basti EC2 instance deployed in a private subnet? Do you have a high-level diagram?
- BohdanPetryshyn 2y agoThe diagram is available in the basti-cdk package. Probably, I have to make it more visible in the main README: https://github.com/basti-app/basti/tree/main/packages/basti-cdk https://github.com/basti-app/basti/tree/main/packages/basti-... By default, the instance is deployed to a public subnet but any ingress traffic is not allowed by the instance's security group. This is needed for the instance's ability to connect to AWS SSM service (egress only). The user can also deploy the instance to a private subnet but this would require them to manually ensure connectivity to the AWS SSM via NAT gateway, VPC endpoint or other means.