title: Is it possible to use packer to create an image in a private subnet via a bastion?
body: <p>I am trying to use packer to create a Windows image. I'd like to create the instance on a private subnet i.e. inaccessible to the public internet.</p>
  
  <p>Is it possible to do this via a bastion (or by some other means)?</p>
  
  <p>I see from the docs that I can use a bastion for SSH communication: <a href="https://www.packer.io/docs/templates/communicator.html#ssh_bastion_host" rel="nofollow">https://www.packer.io/docs/templates/communicator.html#ssh_bastion_host</a></p>
  
  <p>...and I can also use WinRM for communication: <a href="https://www.packer.io/docs/templates/communicator.html#winrm_host" rel="nofollow">https://www.packer.io/docs/templates/communicator.html#winrm_host</a></p>
  
  <p>I've tried combining the two sets of options but it just sits at "Waiting for WinRM to become available..." which suggests that isn't supported.</p>
  
  <p>What are my options for using packer to create an instance in a private subnet?</p>