refactored to a cleaner subnet layout, and a basic working 3 tier with bastion host & RDS database.