108: Allow SSH only from Bastion in PublicSubnet

So that we have only one point of ingress. I still have to figure out how to
dynamicize the CIDR for bastion if I was to rebuild the VPC

:pear: @3000