Identity-Aware Proxy

• Compete with AWS Session Manager, OCI Bastion
• Basically, this is a "managed bastion" tool that lets you set up an SSH tunnel to your VPC network by authenticating with your IAM credentials.