Run command in instance through bastion host
ssh -o ProxyCommand='ssh user@bastion.public.host -W %h:%p -i ~/.ssh/id_rsa' user@destination.internal.host -i ~/.ssh/id_rsa my_command