Re-wording this question to hopefully be more understandable. Thanks for the feedback.
We have a data warehouse which sits in our production environment. Our data engineers can get to the host via VPN and 2FA, but otherwise the host is locked down from much of the rest of the environment via ACLs. We would like to transfer a data file off of the host once per day to another host also sitting in that production environment (something that can be done in an automated fashion and not require an engineer to pull the file once a day and manually transfer it).
The data warehouse is not allowed to talk to the internet (nor will it).
Obviously, this would require opening some kind of access between the data warehouse and the other host, but what is the most secure way to go about doing this? Both from the perspective of the ACL and the method of transferring the file?
