How do I SSH into an ec2 private subnet?
3 Answers: create a security group for your Bastion host that will allow SSH access from your laptop (note this security group for step 4) and launch a separate instance (Bastion) in a public subnet in your VPC. Give that Bastion a public address either at launch or by assigning an elastic address.