Access control method for bastion host in multi-cloud environment

Abstract

The invention provides a bastion host access control method in a multi-cloud environment. The bastion host access control method comprises the following steps: deploying a jumpserver open source springboard system; adding a network domain, and configuring a middle springboard machine system; running the script to execute the transmission of the public key file, and forbidding the user name password login of the machine at the same time; according to the method, the cloud servers completing key docking are accessed to the web end of the jumpserver open-source springboard machine system in batches, so that users on a machine where the jumpserver open-source springboard machine system is located log in the machine through a unified web end, and user unauthorized operation caused by different user identity permissions is avoided. The control console sets command alarm, notifies a system administrator at the first time for operation commands with potential safety hazards, and configures modes of command log auditing, machine login auditing and operation video recording at the same time, and has the advantages that after the cloud server accesses the bastion host, only secret key login is supported, and hackers are prevented from directly logging in the machine through a remote computer.

Description

technical field [0001] The invention relates to the technical field of data security, in particular to a bastion machine access control method in a multi-cloud environment. Background technique [0002] With the rapid development of information security, the security of enterprise systems is an important focus of enterprises when choosing a service construction platform. With the rapid rise of domestic public clouds, the cost of providing customized services for enterprises is gradually reduced. The number of servers on the cloud It is also increasing with the expansion of business. [0003] At the same time, enterprises will also deploy hot standby services in different public clouds. Server login or access in a multi-cloud environment has become a problem that must be solved for companies to protect information security and avoid production accidents at this stage. [0004] At present, for enterprises that provide Internet + services, there are hundreds of cloud servers a...

AI Technical Summary

Problems solved by technology

[0004] At present, for enterprises that provide Internet + services, there are hundreds of cloud servers at every turn. Development, testing, operation and maintenance and security personnel all need to log in to the server for operation. When more and more devices need to be operated and maintained, When the personnel involved in maintenance become more and more diverse, the authority becomes more difficult to manage. Without a good mechanism, it is easy to cause confusion in operation and maintenance;

Images