How to use Amazon AppStream 2.0 to reduce your bastion host attack surface | Amazon Web Services || To help protect their assets, many security-conscious enterprises require their system administrators to go through a “bastion” (or “jump”) host to gain administrative access to backend systems in protected or sensitive network segments. A bastion host is a special-purpose instance https://aws.amazon.com/blogs/security/how-to-use-amazon-appstream-2-0-to-reduce-your-bastion-host-attack-surface/