This message was deleted.

Put a private load balancer in front of it and make it only accessible to a vpn ip or even better, put oidc authentication on it with a connection to your idp (line okta) and only allow users connected via sso to see the Atlantis UI

We have done this setup already with AWS Client VPN. Since we have some VPN connection limit sometimes devops team is not able to connect to Atlantis.