Feb 14 · 6 min read · In this detailed guide, I’ll walk you through how I built a secure production-style AWS architecture where: Private EC2 instances have no public IP They can still access the internet via NAT Gateway SSH access is only possible through a Bastion Ho...
Join discussion
Jan 4 · 5 min read · When you first launch an EC2 instance, AWS feels simple. You click a few buttons.You get a public IP.You SSH in. And for a while, that feels like “cloud”. But the moment you ask: Who should be allowed in? Who should never be seen? How do private syst...
Join discussionNov 8, 2025 · 4 min read · Today I want to share how to setup MySQL RDS in AWS Infra step by step. In this scenario you can see how to configure and setup RDS with best practice ways and connect RDS from DBeaver via using bastion host. Let’s check it out guys. Here is the step...
Join discussion
Sep 12, 2025 · 4 min read · SSE를 통해 private DB를 외부에 노출하지 않고 접근할 수 있는 방법을 알아보겠습니다. private Instance에 접근하기 중요한 데이터와 비즈니스 로직이 들어있는 Instance들의 경우에는 보안을 위해 인터넷에 노출시키지 않고 사설망에 두고 운영하는 경우가 많습니다. 사설망에 있는 Instance들을 private Instance라고 합니다. 인터넷에 노출되지 않아 보안이 강력해지지만 관리자들도 접근할 수 없게되어 privat...
Join discussion
Sep 9, 2025 · 3 min read · Introduction When you create an Amazon RDS instance without changing defaults, it usually launches inside the default VPC with public access enabled. While convenient for testing, this setup exposes your database directly to the internet, increasing ...
Join discussion
Sep 4, 2025 · 3 min read · When working with cloud infrastructure, one of the biggest concerns is how to securely access private servers without exposing them directly to the internet. This is where a Bastion Host (also known as a Jump Server) comes in. In this blog, we’ll exp...
Join discussion
Jul 16, 2025 · 5 min read · How VPC Endpoint internally resolved DNS to allow private access to AWS Services We’ve all been there, trying to connect to an EC2 instance in a private subnet, only to end up fighting in a web of NAT Gateways, route tables, and Bastion Hosts. You as...
Join discussionJul 3, 2025 · 2 min read · The issue in the above practices is that, in organization they cannot afford that anyone can git clone there repository so the organization uses GitHub IP allow list. What is IP allow list?It is a list of allowed IPs who can only Execute Git Commands...
Join discussion
Jun 21, 2025 · 2 min read · 🛡️ What is a Bastion Host? A bastion host (also known as a jump box) is a public-facing EC2 instance that serves as a secure entry point to access private EC2 instances in a VPC that have no direct internet access. ✅ Prerequisites You have two EC2...
Join discussion
Jun 19, 2025 · 4 min read · Bastion host or server is a server mainly for jumping connection, especially ssh connection. It’s also known as jump server The reason is mainly for security and to reduce the attack surface. Only bastion server is exposed to the outer world and all ...
Join discussion