A Bastion Server (Bastion Host) is a secure Amazon EC2 instance placed in a public subnet. It is used to securely access EC2 instances located in private subnets.
Administrators first connect to the Bastion Server using SSH, then access private servers without exposing them directly to the internet.
In simple words, a Bastion Server is a secure gateway used to manage private servers.