Developers need SSH key pairs for a bastion jump box used only in the city’s sandbox account during feature work. What is the sound practice?
Select an answer to reveal the explanation.
Short Explanation
Sandbox bastions get their own keys—leave production private keys in production. Generating certs or SSH pairs for development is fine; copying prod material into laptops and repos is not.
Full Explanation
Development environments should use separately generated SSH keys or certificates rather than production key material. Reusing or publishing production private keys expands compromise risk. Open unauthenticated remote access is not an acceptable substitute for proper key management in a municipal sandbox.