We frequently connect to these hosts through an ssh tunnel to the bastion box. This will enable us to do stuff like manage users on these boxes that are buried within the VPC. Change-Id: I6121585bafc7ae661e66060eeefdd472edcacbb2
