Technical Glossary
Bastion Host
Exact Definition
A Bastion Host is a special-purpose computer on a network specifically designed and configured to withstand attacks, serving as a secure gateway for administrators to access internal server networks.
Architectural Deep Dive
To protect database servers, engineers place them in private subnets with no public IP addresses. To access these databases for maintenance, administrators connect to a secure, audited bastion server (or jump box) placed in a public subnet. Access is limited to verified IP addresses and SSH keys.
The ERPStack Approach
We set up bastion hosts and AWS Systems Manager Session Manager for all private database environments, ensuring your database has no public ports open to the internet.