Azure Bastion
Azure Bastion is a fully managed Azure service that provides secure browser-based remote access to virtual machines through a virtual network without exposing them to the public internet.
Azure Security
An Azure Bastion instance is a fully managed compute unit that runs the processes required to provide Azure Bastion connectivity and session capacity.
- How it is used
- Provides a managed perimeter path for securely administering Azure VMs without publicly exposing RDP or SSH ports.
- How deep it goes
- Walks through SKU selection, subnet and public-IP deployment, capacity sizing, portal sessions, and CLI native-client configuration.
- Examples
- Uses Azure CLI VNet, public-IP, and Bastion creation commands plus browser sessions to Linux SSH and Windows RDP targets.
- What you can do after
- Operate/configure it by deploying Azure Bastion and connecting to Azure VMs through browser-based or enabled native clients.
Microsoft Azure in Action
Azure Bastion is a managed Azure service that provides secure browser-based access to virtual machines through an Azure virtual network without exposing them directly to the public internet.
- How it is used
- Provides remote VM access while avoiding public IP exposure.
- How deep it goes
- Explains the portal-to-browser RDP workflow and a file-transfer limitation, but does not detail Bastion setup or network internals.
- Examples
- Shows a portal Bastion connection that opens a VM desktop in the browser and suggests OneDrive for moving files.
- What you can do after
- Operate/configure it by choosing Bastion from a VM’s Azure portal menu to open a browser-based RDP session.
Related concepts
- Azure CLIused by · Azure CLI is Microsoft’s cross-platform command-line interface for creating, configuring, and managing Azure resources and services.
- bastion hostproduces · A bastion host is a hardened intermediary system that provides controlled administrative access to resources in a restricted network.
- TLSuses · Transport Layer Security (TLS) is a cryptographic protocol that protects network communications through confidentiality, integrity, and authentication of communicating endpoints.
- SSHuses · SSH is a cryptographic network protocol providing authenticated and encrypted remote access, command execution, and data transfer over untrusted networks.
- virtual networkuses · A virtual network is a logically isolated, software-defined network that connects virtualized resources and controls communication among them and with external networks.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.