AWS bastions and assume-role
As coinbase is a Bitcoin wallet and they transact a lot of money it suprises me that they reveal details of their implementation publicly.<p>Edit - Getting downvoted a lot.<p>Seems that some people think that the expression 'You shouldn't rely on security through obscurity' means that it's OK to publish your backend infrastructure.<p>Best practice is defence in depth.<p>That means you secure everything including your implementation details.<p>If a zero day is found in any of their stack, they're a google search away from being found for that.