Deprecation of bastion SSH access

Hi all,
I would like to inform you that we will disable all SSH access to all bastiondb and bastion-app on midas and mfc account and we move to SSM. So we can start access bastiondb through AWS SSM instead of use SSH.

Timeline

we will disable SSH access on Monday, March 16th 2020 (postponed until further notice)

Rule and Scope

SSM only allowed to bastiondb on midas and mfc and not allowed for bastion-app. We also allow PortForwardingSession a.k.a jumphost only for staging bastiondb. Here is list of bastiondb instance that you can access through AWS SSM :

midas

dbbstn-stg-bastion-20ce63ec54f3d047 (i-02d271038a02336b4)
dbbstn-prod-bastion-d97f2e6897d12005 (i-033de88fac3bb81ee)

mfc-stg

bastiondb (i-0a2a2ef789388bc4b)

mfc-prod

bastiondb (i-0c32e4013fae2d309)

Reference :

https://29022131.atlassian.net/wiki/spaces/REL/pages/1263490820/How+To+Acceess+MFC+Bastions+via+AWS+SSM

Should you have questions or concerns regarding this deprecation feel free to reach us through @fintech-devops-infra-eng
thank you.