My colleague John Martinez wrote about what a bastion host actually costs an engineering team at 2 a.m., the jump box nobody fully understands, the failover that's never tested, the credential glue code somebody has to babysit forever. If you want that version, the practitioner's version, go read ...
