Home/Templates/Shell access without opening a port
Shell access without opening a port
Reach a server for troubleshooting with nothing listening on the internet, and a recording of the session.
Terraform
Why bother
A jump box with SSH open to the world is something an attacker can reach and try passwords against. A broker keeps the port shut, checks who you are first, and writes down what you typed.
How you know it worked
Open a session. Confirm there is no inbound rule and the transcript was saved.
Not written yet
No code exists for this one. It is listed so the gap shows on the coverage table. When it is written, each platform will use:
| Platform | Service |
|---|---|
| AWS | SSM Session Manager logging to S3 and CloudWatch |
| Azure | Azure Bastion with diagnostics turned on |
| Google Cloud | Identity-Aware Proxy TCP forwarding with audit logs |
| Oracle Cloud | OCI Bastion with managed SSH sessions |