A typical scenario is when you have a multi-tier architecture with web servers in a public subnet and database servers in a private subnet. To securely manage and maintain the database servers, you use a Bastion Host in the public subnet, ensuring that direct access to the database servers is restricted while still allowing administrative access when needed.
