Chaos and Order https://www.youngju.dev/blog 천천히 올바르게. AI Researcher & DevOps Engineer Youngju's blog. GPU/CUDA, LLM, MLOps, Kubernetes AI workloads, and data engineering — plus mindset essays on confidence, routines, health, and sport psychology. ko fjvbn2003@gmail.com (Youngju Kim) fjvbn2003@gmail.com (Youngju Kim) Thu, 10 Sep 2026 00:00:00 GMT https://www.youngju.dev/blog/devops/2026-09-10-cloud-bastion-aws-ssm-eice.en What a bastion is in the cloud, and how to use one well on AWS — ProxyJump measured, SSM Session Manager, EC2 Instance Connect Endpoint https://www.youngju.dev/blog/devops/2026-09-10-cloud-bastion-aws-ssm-eice.en A bastion is the host that reduces the doors into a private network to one. Go through a jump host with OpenSSH ProxyJump in a homelab and measure what the target server actually sees, then compare the two things AWS recommends instead of a bastion, SSM Session Manager and EC2 Instance Connect Endpoint, on documented facts. Thu, 10 Sep 2026 00:00:00 GMT fjvbn2003@gmail.com (Youngju Kim) awsbastionsshssmsecuritydevops https://www.youngju.dev/blog/devops/2026-09-10-cloud-bastion-aws-ssm-eice.ja クラウドの bastion とは何か、AWS ではどう使うのがよいか — ProxyJump 実測、SSM Session Manager、EC2 Instance Connect Endpoint https://www.youngju.dev/blog/devops/2026-09-10-cloud-bastion-aws-ssm-eice.ja bastion は私設ネットワークへの入口を一つに絞ったホストだ。ホームラボで OpenSSH の ProxyJump でジャンプホストを経由し、対象サーバーが何を見ているかを実測してから、AWS が bastion の代わりに勧める SSM Session Manager と EC2 Instance Connect Endpoint を文書の根拠で見比べる。 Thu, 10 Sep 2026 00:00:00 GMT fjvbn2003@gmail.com (Youngju Kim) awsbastionsshssmsecuritydevops https://www.youngju.dev/blog/devops/2026-09-10-cloud-bastion-aws-ssm-eice 클라우드의 bastion 이란 무엇이고, AWS 에서는 어떻게 쓰는 것이 좋은가 — ProxyJump 실측, SSM Session Manager, EC2 Instance Connect Endpoint https://www.youngju.dev/blog/devops/2026-09-10-cloud-bastion-aws-ssm-eice bastion 은 사설망으로 들어가는 문을 하나로 줄인 호스트다. 홈랩에서 OpenSSH ProxyJump 로 점프 호스트를 거쳐 보며 대상 서버가 무엇을 보는지 실측하고, AWS 가 bastion 대신 권하는 SSM Session Manager 와 EC2 Instance Connect Endpoint 를 문서 근거로 견준다. Thu, 10 Sep 2026 00:00:00 GMT fjvbn2003@gmail.com (Youngju Kim) awsbastionsshssmsecuritydevops https://www.youngju.dev/blog/devops/2026-09-10-cloud-bastion-aws-ssm-eice.zh 云上的 bastion 是什么，在 AWS 上怎么用才好 — ProxyJump 实测、SSM Session Manager、EC2 Instance Connect Endpoint https://www.youngju.dev/blog/devops/2026-09-10-cloud-bastion-aws-ssm-eice.zh bastion 是把进入私有网络的门减到只剩一扇的主机。在家庭实验室里用 OpenSSH 的 ProxyJump 经过跳板机，实测目标服务器到底看到了什么，再以文档为据比较 AWS 推荐用来替代 bastion 的两样东西：SSM Session Manager 和 EC2 Instance Connect Endpoint。 Thu, 10 Sep 2026 00:00:00 GMT fjvbn2003@gmail.com (Youngju Kim) awsbastionsshssmsecuritydevops