News for hackers. Stuff that matters.
Re:Ask HN: How can I secure my AWS instance's SSH access if ... by tmottabr on Friday February 18, 2022 @08:47AM (#30385589)
is there any way to just tunnel the ssh traffic trough the bastion but let the ssh authentication be done from my computer instead?

that way i would not need to keep the keys in the bastion server at all.

Re:Ask HN: How can I secure my AWS instance's SSH access if ... by indigodaddy on Friday February 18, 2022 @12:18PM (#30388418)
Yes, it’s fairly trivial with ProxyCommand or ProxyJump switch:

https://www.redhat.com/sysadmin/ssh-proxy-bastion-proxyjump