Create a bastion host with autoscaling group in your public subnet with an elastic IP address that automatically re-attaches if the host is killed.