I'm currently working for a startup company who maintains a server on AWS. Currently, our server is set up so that in order to access it via SSH, you need to be on a white listed IP (set up in AWS) and have a valid RSA key to connect.
However, the current developer we are working with has a dynamic IP that changes from day to day, which makes maintaining the white list a time-consuming endeavor (different time zones, communication, etc.).
How much of a security risk is it in the short term to drop the white list while we work with this developer?
Note: The server currently doesn't contain any truly sensitive data (just some proprietary code), however in the near future it will.