Chaining security groups

Question

I have been looking all around why something which I believe should work, does not. Here\'s a breakdown

• I have a bastion with publicly assigned IP in that\'s securi