Securely Access Window Bastion host using System Manager Port Forwarding method

1

Amazon VPC

Above Linux and Windows bastion host must be in same AWS Virtual Private Cloud (Amazon VPC). On Linux instance security group inbound rule you can update with Windows bastion host private ip address that way no other host from same vpc can connect. No IAM role need to attach to Linux vm or open for the whole vpc cidr. See below sample screenshot.

#Cloud Computing #Cloud Infrastructure #VPS 20 social mentions

2

AWS Identity and Access Management

For this demo I created new AWS Identity and Access manager (IAM) user with programmatic access to AWS Account.

#Identity And Access Management #Identity Provider #SSO 52 social mentions

3

Amazon EC2

I created a new Amazon Elastic Compute Cloud EC2 security group with no single port open at inbound rules. Then lunched new Window instance at public subnet and attached above step #3 IAM role and no port opened security group. If require see below for detail step for lunching basing host. See below screenshot for example.

#Cloud Computing #Cloud Infrastructure #VPS 63 social mentions