[Spike] Evaluate air-gap scenarios without bastion host

[adrianriobo]

• AWS: https://aws.amazon.com/blogs/compute/secure-connectivity-from-public-to-private-introducing-ec2-instance-connect-endpoint-june-13-2023/
• Azure: https://azure.microsoft.com/en-us/products/azure-bastion

[adrianriobo]

Closed as the AWS approach would require aws cli for proxy the connection, this will require cloud provider specifics which we want to avoid