tf_aws_bastion_s3_keys

Dynamically populates SSH authorized_keys from an S3 bucket, enabling admins to add or revoke access by updating the bucket, as described in the S3-based SSH Key Management feature.

Uses an auto-scaling group with min=max=desired=1 to ensure automatic instance replacement on failure, providing resilience without manual intervention, per the Auto-scaling Resilience focus.

Supports configurable CIDR ranges, IPv6 allow-lists, and security group integrations for precise SSH access, detailed in the Flexible Network Access section.

Allows injection of additional user-data scripts for security hardening or Elastic IP assignment, via the additional_user_data_script and eip inputs, enhancing adaptability.