I am exploring how to setup bastion host like security and networking configuration on AWS.
lets say I have multiple EC2 instances. But I do not want to enable SSH on ev
If a web-based solution is adequate, you should try Bastillion
https://aws.amazon.com/marketplace/pp/B076D7XMK6
You can even use tags to restrict user access to instances.
http://www.bastillion.io/docs/bastillion-ec2/profiles