- Hailcannon gets a list of customers with active bastions from keelhaul.
- Creates a hacker for each customer, and provides that hacker with a grpc connection to bezos as well as SpanxCredentials (sts credentials).
- Hacker then periodically calls to bezosphere for a list of security groups, and updates the bastion ingress stack.
- The ingress rules in the bastion ingress stack allow the bastion to talk to things in its VPC.
