Solve for bastion hosts in both regions

[kfferrando]

We should have some jumphosts/bastion hosts in each region to facilitate ad-hoc troubleshooting, emergency deployments, etc.

In the previous model, the Jenkins host in us-west-2 was used for this reason but we would like to separate the CI environment from the SRE admin tasks, particularly with Jenkins being known for exploits.