Bastion

Managed jump service issuing time-limited SSH sessions into private subnets.

Provider: oci
Kind: Bastion host
Category: Security
Official docs: https://docs.oracle.com/en-us/iaas/Content/Bastion/Concepts/bastionoverview.htm

Properties · 3 set by this component

property	type	values	required	kind default	this component
clientCidrAllowlist · component property	boolean	—	no	true	inherited
justInTimeAccess	boolean	—	no	false	▸ true
managed	boolean	—	no	false	▸ true
mfaRequired	boolean	—	no	—	inherited
protocols	enum	ssh \| rdp \| both	no	—	▸ ssh
publicIp	boolean	—	no	—	inherited
sessionRecording	boolean	—	no	—	inherited
sessionType · component property	enum	managed-ssh \| port-forwarding \| dynamic-port-forwarding	no	managed-ssh	inherited
sshKeyRequired · component property	boolean	—	no	true	inherited

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "bastion", component: "oci-bastion" }

Other Bastion host products · 17

Bastionhostalibaba-bastionhostalibabacloudbastion-host EC2 Instance Connect Endpointaws-ec2-instance-connect-endpointawsbastion-host AWS Systems Manager Session Manageraws-ssm-session-managerawsbastion-host AWS Verified Accessaws-verified-accessawsbastion-host Azure Bastionazure-bastionazurebastion-host Microsoft Entra Private Accessazure-entra-private-accessazurebastion-host Cloudflare Accesscloudflare-accesscloudflarebastion-host Cloudflare One RDPcloudflare-rdpcloudflarebastion-host Generic bastion hostbastion-hostbastion-host HashiCorp Boundaryboundarybastion-host ContainerSSHcontainersshbastion-host Paralusparalusbastion-host Pomeriumpomeriumbastion-host OpenSSH jump hostssh-jump-hostbastion-host Teleportteleportbastion-host Chrome Enterprise Premiumgoogle-chrome-enterprise-premiumgcpbastion-host Identity-Aware Proxygoogle-identity-aware-proxygcpbastion-host

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# Oracle Cloud Bastion: Oracle-managed jump service; you cannot log into the bastion itself, only
3# create time-limited sessions to private targets ("Bastion Overview"). Access is restricted by a
4# client CIDR allowlist and every session needs an SSH key pair and IAM authorization.
5schemaVersion: "1"
6type: "component"
7id: "oci-bastion"
8kind: "bastion-host"
9provider: "oci"
10docs: "https://docs.oracle.com/en-us/iaas/Content/Bastion/Concepts/bastionoverview.htm"
11defaults:
12  managed: true
13  protocols: "ssh"
14  justInTimeAccess: true
15properties:
16  sessionType:
17    type: "enum"
18    values: ["managed-ssh", "port-forwarding", "dynamic-port-forwarding"]
19    default: "managed-ssh"
20  clientCidrAllowlist:
21    type: "boolean"
22    default: true
23  sshKeyRequired:
24    type: "boolean"
25    default: true

The same page as markdown, for an agent: /catalogue/components/oci-bastion.md