You need to implement the following homework project with AWS CLI.

Implement the following security requirements:

a. Users on the Internet can ping any host in the public subnet, but they cannot ping any host in the private subnet.

b. Users in the private subnet can ping any host in the public subnet and any host in the private subnet, but they cannot ping any host on the Internet.

c. Users in the public subnet can ping any host on the Internet and any host in the public subnet, but they cannot ping any host in the private subnet.

Hint: You may need to create a bastion server (also known as a jump box). It is used to reduce the threat surface area. For the bastion instance, it will be open to the Internet and allow port 22. You can use the bastion instance to ssh into the private instance.