Bastion Host Security

Recording ssh Sessions Established Through a Bastion Host a great idea:

https://blogs.aws.amazon.com/security/post/Tx2HSURNJZPUP68/How-to-Record-SSH-Sessions-Established-Through-a-Bastion-Host
https://aws.amazon.com/blogs/startups/securing-ssh-to-amazon-ec2-linux-hosts/

ssh through A bastion host transparently:
https://10mi2.wordpress.com/2015/01/14/using-ssh-through-a-bastion-host-transparently/

Use Google Authenticator MFA on bastion host:
https://www.vultr.com/docs/how-to-setup-two-factor-authentication-for-ssh-on-centos-6-using-google-authenticator

Netflix ssh best practice:
https://www.oreilly.com/learning/how-netflix-gives-all-its-engineers-ssh-access