I am using AWS and looking for any comments on best practices regarding permitting connections to my DB from specific IPs on the Internet. I could give the DB a public IP and just lock down the firewall to only allow connections from the specific IPs that need to connect.
I could probably also use a bastion host in the public subnet and allow the 3rd parties to connect directly to the DB through the bastion.
Any other thoughts or assessments of my proposed options would be greatly appreciated. (VPN is not an option here due to the connecting 3rd parties.)