well pulumi is also provisioning the bastion hosts