What is a Bastion?
It’s essential to consider the security implications before allowing direct access to cloud services and resources, particularly as the latter expands. Some individuals get around this problem by setting up a virtual machine within the virtual cloud network and linking it to all the cloud services. This cuts down on publicly accessible services while facilitating connections for developers and system administrators. This virtual machine (VM) is like a manual bastion or leap box.
Create a Bastion
- Connect to Oracle’s cloud service. To access the main menu, choose the hamburger icon in the upper left corner.
- On the menu select “Identity & Security > Bastion”.
- Select the compartment and click the “Create bastion” button.
- Enter the bastion name and select the VCN and subnet for the bastion. We need to enter a CIDR block allowlist. In this case I’ve used the subnet for my IP address from my internet service provider. Click the “Create bastion” button.
- Click on the “Create session” button.
- Connect
Our previously copied connection information should look something like this at this point.
ssh -i -N -L :ip-connection:22 -p 22 ocid1.bastionsession.oc1.uk-london-1.amaa...3acq@host.bastion.uk-london-1.oci.oraclecloud.comRegards
Osama
Technology Geek 