Refresher
https://www.youtube.com/watch?v=pNE9J81aYLc
Internal servers allow only the bastion host IP connection via SSH
To run on public Subnet