I know folks yell a lot about offline backups.
Please normalize yelling about offline jump servers too.
It's always good to have a break-glass box.
@LitMoose @jerry @yaro might have an opinion here
@nobletrout @LitMoose @jerry my take on breakglass. It’s only breakglass if the action requires two people, is auditable, and has a physical access control. Anything less and it’s just security by obscurity relying on people “doing the right thing”.