Tag - bastion server aws

You likely have this setup already. App servers sit in private subnets, the database is locked down, and everything looks good on the diagram until someone...