Access to both the staging site and the bastion is restricted by IP address, so they can only be accessed from the Azavea network and from PFB's IP, but that won't be a problem once the VPN is back up
If the VPN isn't up soon enough, we can add a temporary IP to the IP whitelist in the AWS console then remove it when done.
Criteria:
Potential issues: