add bastion support to aws instance