AWS bastions and assume-role
As coinbase is a Bitcoin wallet and they transact a lot of money it suprises me that they reveal details of their implementation publicly.Edit - Getting downvoted a lot.Seems that some people think that the expression 'You shouldn't rely on security through obscurity' means that it's OK to publish your backend infrastructure.Best practice is defence in depth.That means you secure everything including your implementation details.If a zero day is found in any of their stack, they're a google search away from being found for that.