search

Rabadash8820 / AwsUtil

A set of scripts, templates, and schemas for general AWS cloud infrastructures.
Mozilla Public License 2.0
2 stars 0 forks source link

Remove HTTPS Egress From Bastion Host #29

Closed Rabadash8820 closed 7 years ago

Rabadash8820 commented 7 years ago

Bastion hosts only ever needed HTTPS egress rules so that they could access user data bash scripts stored in GitHub. Because we are now using cfn-init for all instance configuration, these rules can be removed to keep things secure.

Rabadash8820 commented 7 years ago

Actually, HTTPS egress is still necessary; not for accessing GitHub user data bash scripts, but for cfn-init to describe resources in a CloudFormation stack. Discovered this while working on the wordpress template.

Canceling this issue...