Tailscale ate my network (and I love it)
I've never used Tailscale, but I want to highlight specifically for working with AWS, you could consider using AWS Systems Manager to access machines that are in private VPCs[1][2].  This has the advantage of reusing the same credentials used already for AWS, as well as being able to further restrict exactly what can be done with them.<p>[1]: <a href="https://aws.amazon.com/premiumsupport/knowledge-center/systems-manager-ssh-vpc-resources/" rel="nofollow">https://aws.amazon.com/premiumsupport/knowledge-center/syste...</a>
[2]: <a href="https://medium.com/hackernoon/ditch-your-ssh-keys-and-enable-aws-ssm-ec1c2b27350c" rel="nofollow">https://medium.com/hackernoon/ditch-your-ssh-keys-and-enable...</a>