An SSH bastion server on Google Cloud enables you to connect Starburst Galaxy to a database on Google Cloud with an SSH tunnel. This allows you to create a catalog for a database that is not publicly available.
The following steps detail other configuration aspects for your database.
You can create a suitable bastion server on Google Cloud with the following configuration.
The recommended setup for the security group is to allow SSH connections only from the specific IP address range/CIDR of Starburst Galaxy. This information is available when you configure the SSH tunnel with a locked down bastion host and use Validate and save SSH tunnel. The connection attempt fails and the correct range is displayed. Use the information to update the security group for the bastion host, and rerun the validation.