I have a requirement to setup a bastion host (Amazon Workspace) to connect to an ec2 instance living on a different account.
As Amazon Workspaces cannot assume a role the way EC2s can, A cross account policy cannot be used to setup a link between them.
Both Amazon Workspace and EC2 instance live in their respectve VPC's in separate accounts. Is there a Cross account policy like solution which I can use to link these two?
P.S. I cannot create a Workspace in the same VPC/Account because the directory service is only available in one account but the EC2 which needs to be connected to is in other. Also, the EC2 cannot go public as well.