In the Configure Instance Details select the VPC we created.Īlso, check whether the Auto-assign Public IP is enabled or not. Step – 4: Now go to the management console and launch a new EC2 Instance. While creating the Security Group, Select the “ VPC” that we created for the Bastion Host and in the “ Inbound Rules”, Add rule SSH and in the source add MY IP and add another All Traffic, in the source select custom and give the Security Group that we created for the Bastion Host and click on Create. Step – 3: Create a Security Group separately for the Bastion Host. Give the name for the IGW and click on Create.Īfter the creation of IGW select the created IGW and go to Actions and select Attach to VPC, attach it to the VPC we created for the Bastion Host. Now create an Internet GateWay for the VPC. Route Table, select the created table and click on Actions and select Set Give the name to the Route Table and Select the VPC that we have created for the Bastion Host. Now create a Route Table for the VPC that you have created. Here as we have already created a VPC for Bastion Host we will select the VPC Subnet select the VPC for which we need to add the subnets and click on create. Step – 2: Create Subnets, Route Tables and Internet GateWay (IGW) for the VPC. Here you can give the name to the VPC and describe the CIDR block as per your requirement. Go to the management console and select VPC and Click on Create VPC. Step – 1: Firstly, we will create a VPC for the Bastion Host. Here are the steps that are to be followed while creating a Bastion Host. We also need to create a separate Security Group for this as it would be easy for us to handle all the Bastion servers. The important thing one should keep in mind is that while creating a Bastion Host it needs to be created in a separate Virtual Private Network (VPC) which should be available only for the Bastion Server. A Bastion host is used to administer EC2 instances using SSH or RDP securely. A Bastion Host is a specialized server which is provided access to a private network from external networks. Bastion Host connects VMs, your local computers, and cloud resources without exposing the other servers to public network connections. In this blog, we will see an overview of bastion host and installation of bastion host on AWS instances.Ī Bastion Host is a specialized computer that is steadily exposed to a public network. The bastion Host processes and filters all incoming traffic and prevents hostile traffic from entering the network. Bastion host configuration for secure access over a network plays a major role in any organizational network as the bastion host provides more security to the servers.