...
VPC ID: vpc-f67abf93 (172.16.0.0/16)
2.) After the VPC is created, create a new Internet Gateway and attach it to the new VPC:
...
13.) Once you add the key, you should now SSH to the bastion server as the 'ec2-user' (no need to use a specific key file as you took care of that in the previous step).
14.) Once you are logged into the bastion server, you can SSH to the private instances as 'ec2-user' using their Private IP address. Later on, after the Salt Master has deployed accounts users can use their regular account name and key as they will then exist on the servers.