Options to disable the bastoin SG + optional aws profile config for aws provider

[Z4ck404]

No description provided.

[paulczar]

doesn't sshuttle still need to SSH into the bastion to create the SSH vpn ?

[scottd018]

doesn't sshuttle still need to SSH into the bastion to create the SSH vpn ?

@paulczar looks like our command is using SSH over SSM, which is using the AWS service to make the connection. in that case no SSH port should be opened, so we should be good

    sshuttle --ssh-cmd="ssh -o ProxyCommand='sh -c \"aws --region ${var.region} ssm start-session --target %h --document-name AWS-StartSSHSession --parameters \
    portNumber=22\"'" --remote ec2-user@${(var.private && !var.bastion_public_ip) ? aws_instance.bastion_host[0].id : ""} --dns ${var.vpc_cidr}