If I have an AWS VPC with a private and public subnet. The public subnet has 1 EC2 instance and the private subnet has 1 EC2 instance as well. If I do a site to site VPN to my VPC from my work location. Can I access my private subnet EC2 instance via ssh using the private ip? Or do I have to do a Bastian host from my public subnet to access my private subnet EC2 instance?