On: Restrict Access to your internal websites on AWS with BeyondCorp

[jcims]

Note this is for operations/privileged access in high risk environments vs. standard issue desktops. Saw a little bit of this up close a few years ago, seemed quite solid and well thought out.