Hacker News Reader

SSH Bastion Best Practices --> Don't use one

Could you share your reasons for not using one in the provided scenario?

You can use a service like Teleport or set up an SD WAN. I am using a split tunnel AWS VPN client service to avoid having to set up an Bastion server