Which cloud computing feature provides a secure gateway for accessing internal networks from external sources?

A bastion host serves as a secure gateway to access internal networks from external sources. It is specifically designed to withstand attacks and provides only a limited set of functions, minimizing the attack surface. Typically, a bastion host is configured to allow remote access to it, often via SSH (Secure Shell) or other secure methods, and from there, users can connect to internal systems. This setup helps protect the internal network by acting as a barrier between external untrusted environments and the internal resources.

This configuration ensures that external requests are funneled through a highly secure point, which can also be monitored, logged, and controlled effectively. Since bastion hosts often run in a demilitarized zone (DMZ) or at the edge of the network, they are essential for enhancing security in cloud environments where remote access needs to be managed securely.