iac.htora.dev · security templates

Home/Templates/Shell access without opening a port

Shell access without opening a port

Reach a server for troubleshooting with nothing listening on the internet, and a recording of the session.

Terraform

Why bother

A jump box with SSH open to the world is something an attacker can reach and try passwords against. A broker keeps the port shut, checks who you are first, and writes down what you typed.

How you know it worked

Open a session. Confirm there is no inbound rule and the transcript was saved.

Not written yet

No code exists for this one. It is listed so the gap shows on the coverage table. When it is written, each platform will use:

PlatformService
AWSSSM Session Manager logging to S3 and CloudWatch
AzureAzure Bastion with diagnostics turned on
Google CloudIdentity-Aware Proxy TCP forwarding with audit logs
Oracle CloudOCI Bastion with managed SSH sessions

Registry 0.6.0. Built 2026-09-22.

Made by Habibullah Tora. Code under the MIT licence, writing under CC BY 4.0.