Bastions are a bad pattern. They are a way to paper over bad systems of authentication and access control. There are better ways to achieve the same thing, especially with cloud providers.