As the number of EC2 instances in your AWS environment grows, so does the number of administrative access points to those instances.
A bastion is a special purpose server instance To give the controlled access to all remaining servers, that is designed to be the primary access point from the Internet and acts as a proxy to your other EC2 instances.