adding bastion role and task to setup access to the dbs from it