SSH into to private instance via Bastion

PRIVATE server is not accessible directly from the CLIENT.

PRIVATE server is accessible from BASTION.

Create tunnel

ssh -i bastion-key.pem -L 2022:private-ip:22 user@bastion-ip

Access private server

ssh -i private-key.pem -p 2022 user@localhost