???
also you can have multiple bastion for a more secure separation
1 company 2 production 3 development
SSH JUMP
ssh -J user@bastion-host user@target-host
if you need to access 2 or more bastion
ssh -J user@bastion-host1,user@bastion-host2 user@target-host
create a mermaid diagram
or redirect you network for using app
ssh -L 80:private-site:80 user@bastion-host