diff --git a/docs/bastion.md b/docs/bastion.md
index b7f66bcbd2cef..11ffadbe4e899 100644
--- a/docs/bastion.md
+++ b/docs/bastion.md
@@ -141,7 +141,7 @@ ssh-add path/to/private/key
 # Now you can SSH into the bastion. Substitute the administrative username of the instance's OS for <username> (`ubuntu` for  Ubuntu,  `admin` for Debian, etc.) and the bastion domain for <bastion-domain>. If the bastion doesn't have a public CNAME alias, use the domain of the assigned load balancer as the bastion domain.
 ssh -A <username>@<bastion-domain>
 
-# then you can SSH into control planes or worker nodes in the cluster, using the forwarded auth key
+# then you can use the fowarded authentication to SSH into control-plane or worker nodes in the cluster.
 ssh <username>@<node-address>
 
 ```