Zero Trust Google Cloud Access
You can use a Compute Engine instance as a Jump server to other services running in the same VPC, such as a database or Kubernetes cluster. You can also add Remote.It access to any services which are running on an existing Compute Engine instance. Setup only takes a couple of minutes. You can do all of this without any inbound rules in the security groups, thereby blocking all ingress traffic and eliminating open ports to the internet.
With the target services setup such as databases, storage and web applications, you can simply add authorized users via email address in the Remote.It application. This works well with your remote workers and contractors by eliminating the need for IP allow lists to be maintained. It also works on CGNAT connections where your team may be connected via a cellular or satellite carrier where IP addresses are not known or are transient. For more information on Organizations, click here.
This allows the developers to work with the database with their tools and in their local development environments as if the database were running locally even when the database has multiple availability zones.