Terraform Azure Bastion in Enterprise Scale Module

Hi Community, Actually I deploy the enterprise scale Terraform Code.

I want to know if is possible to implement bastion in a configure connectivity VNET. I can créate a Bastion subnet but I don‘t Know how I can deploy a Bastion in a Landing Zone enterprise scale module. Thanks in advanced.

Should I have to create a separate Module for Azure Bastion host ?