Bastion host
A bastion host is a hardened intermediary system that provides controlled administrative access to resources in a restricted network.
Secure APIs
A bastion server is a hardened intermediary host that provides controlled access to systems on an otherwise private network.
- How it is used
- Controls external access to databases, internal APIs, and other services kept in private subnets.
- How deep it goes
- Explains placement, tunneling, SSH restrictions, trusted origins, and private-subnet rationale without detailing hardening procedures.
- Examples
- Uses tunneled database access, private API access, DMZ diagrams, and API gateway combinations as concrete illustrations.
- What you can do after
- Operate/configure controlled paths from trusted origins to private databases and internal APIs through a hardened SSH intermediary.
Google Anthos in Action
A bastion host is a hardened intermediary host through which administrators connect to otherwise restricted systems or management networks.
- How it is used
- Provides the administrative access path for managing GKE on AWS clusters.
- How deep it goes
- Defines the host’s deployment and access role but does not detail hardening controls or high-availability design.
- Examples
- Uses the initial management-service installation and a Terraform sample that removes the bastion-host deployment step.
- What you can do after
- Operate GKE on AWS management functions by logging in to the deployed bastion host.
Related concepts
- Azure Bastionproduced by · Azure Bastion is a fully managed Azure service that provides secure browser-based remote access to virtual machines through a virtual network without exposing them to the public internet.
- RDP brute-force attackaddresses · An RDP brute-force attack repeatedly tries credentials against Remote Desktop Protocol access to gain unauthorized entry.
- infrastructureconfigures · Infrastructure is the foundational physical, digital, and operational resources and systems that support an organization, computing system, or service.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.