It's a known best practice to use a bastion host to access your private resources, but why not remove it when you are not using it ?
I spend a lot of time researching and curating the best equipment for every aspect of my life.
I recently applied to Ignition Program which provides startup opportunities in Europe to high potential startuppers and entrepreneurs.
Build a small call center application with AWS and Twilio.
Build cheap but scalable blog using AWS and Jekyll.