Implementing the Azure Bastion service

Azure Bastion is a Microsoft fully managed RDP/SSH secure remote access connectivity solution for your Azure VM resources. It protects your Azure VMs’ vulnerable RDP/SSH management ports without exposing them to the internet or requiring public IP addressing in your virtual network.

Getting ready

This recipe requires the following:

• A device with a browser, such as Edge or Chrome, to access the Azure portal: https://portal.azure.com.
• You should sign in with an account that has the Owner role for the Azure subscription.
• A Windows Server Azure VM to use with this recipe; we will step through creating this VM as a Getting ready task:
  • To keep this recipe simple, the VM will be created without an NSG attached to its network interface or the VM’s subnet. We will discuss this further in the There’s more section of this recipe.
  • This will not have a public IP address associated with its network interface.
  • The virtual...