Microsoft Docs

Azure Bastion – Secure RDP/SSH Connectivity

Azure Bastion provides seamless and secure RDP/SSH connectivity to your virtual machines directly in the Azure portal over TLS. It eliminates the need for public IP addresses on your VMs and avoids exposing ports to the internet.

Key Benefits

Fully managed PaaS service – no VM, no client software.
Connectivity over Azure Private Link – traffic never leaves the Azure backbone.
Integrated with Azure RBAC and Azure AD for granular access control.
Supports all VM sizes, both Windows and Linux.
Scales automatically based on concurrent sessions.

How It Works

Deploy an Azure Bastion resource into a virtual network.
Enable the Bastion option on a VM's networking blade.
Open the VM directly from the Azure portal – the connection is tunneled through the Bastion host.

# Example: Deploy Azure Bastion via Azure CLI
az network bastion create \
  --resource-group MyResourceGroup \
  --name MyBastion \
  --public-ip-address MyBastionIP \
  --vnet-name MyVNet \
  --location eastus

Features

Discover all capabilities Azure Bastion offers, from session insights to custom policies.

Pricing

Understand the cost model, including hourly and data transfer charges.

Getting Started

Step‑by‑step guide to set up Azure Bastion in your environment.

FAQ

Answers to common questions about Azure Bastion deployment and troubleshooting.