{"repo":"ovh/the-bastion","free":true,"listed":false,"github":"https://github.com/ovh/the-bastion","clone":"git clone https://github.com/ovh/the-bastion.git","description":"Authentication, authorization, traceability and auditability for SSH accesses.","language":"Perl","stars":2174,"topics":["ssh","bastion","security"],"license":null,"category":"security-tools","readme_excerpt":":lock: The Bastion ================== Overview Bastions are a cluster of machines used as the unique entry point by operational teams (such as sysadmins, developers, database admins, ...) to securely connect to devices (servers, virtual machines, cloud instances, network equipment, ...), usually using ssh . The Bastion provides mechanisms for authentication, authorization, traceability and auditability for your whole infrastructure. Being between your users and your infrastructure, The Bastion adds a layer of abstraction in-between so that your infrastructure doesn't need to know your operational team members individually. Each of your team member has an individual account on The Bastion, and may be a member of one or several bastion groups that may give them access to one or more infrastructures. The infrastructure devices only need to know and trust the bastion group(s) they may be a part of. The Bastion fine-grained RBAC makes it possible to delegate some responsibilities to any account, group-scoped or bastion-wide, including to accounts that might be used by your automation to e.g. manage the lifecycle of the accounts (linked to your human resources management system, your LDAP or AD), ensure a group's ACL is up to date (linked to your CMDB), etc. Automated processes are easy to implement through the JSON API over SSH. Knowledge resources Want to know more while viewing some nice drawings? Here is a series of blog posts that dig more into the core functionalities and pri","default_branch":null,"files":null,"tree":[],"storefront":"/r/ovh","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/ovh/the-bastion/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}