3 Answers: create a security group for your Bastion host that will allow SSH access from your laptop (note this security group for step 4) and launch a separate instance (Bastion) in a public subnet in your VPC. Give that Bastion a public address either at launch or by assigning an elastic address.
Haphazardly Gaming Domain
Join
Now
gaming.haphazardly@gmail.com