Replacing Bastion Hosts with IAP TCP Forwarding for Secure VM Access
Replace bastion hosts with Google Cloud IAP TCP forwarding to give administrators SSH/RDP access to VMs without public IPs. IAM controls access, Cloud Audit Logs provide a trail, and no extra instances to patch.