See https://mozilla-hub.atlassian.net/wiki/spaces/FDPDT/pages/98795521/DevOps#Bastion-Hosts for details.