How can I use an SSH tunnel through AWS Systems Manager to access my private VPC resources?

This is the simple example, can you show how to implement this case?
Windows client machine-->GWT-EC2-->BASTION-EC2-->JENKINS:8080
Windows client machine-->GWT-EC2-->BASTION-EC2-->RDS:5432
Windows client machine-->GWT-EC2-->BASTION-EC2-->KAFKA:9094
etc...

ssh -i key-pair.pem ? or id_rsa_key?

we can do same with similar command like a.. 'aws ssm start-session --target i-myid -L ......'??? help!! <3

Hai, i tried to make hadoop cluster in vpc using instances with private IP address. But it can not use ssh between private IP . I already tried to open ssh port and all traffic in security group, but still not working. From public IP address I can ssh to private, but from private to public can't and private to private also can't. Maybe you know what is the solution for this. Thank You

Great information, please kindly upload more videos related to real world and practical troubleshooting methods and techniques and scenarios for AWS