Has anyone else ran into this bizarre position from PMO? I’m personally aware of dozens of authorized services that use a VPN for privileged access. But they literally told me on a teams call a couple weeks ago that bastion host is only approved method for FedRAMP.