I have started at a new company and am in the process of locking down SSH access to be through a single SSH gateway server.
My question is, should I create a separate SSH gateway server for each environment? (QA, Dev, Stage, Prod)
We are fully in AWS so my current plan is to create an SSH Gateway server on a DevOps VPC and create peer connections to the QA/Dev/Stage/Prod VPCs.
Then I would manage access to environments via SSH keys.
My concern is that this single SSH gateway server has access to all environments, which is a little terrifying. But that being said, it is easier to manage and monitor access.