liveBook · Manning

Just-in-time VM access

As explained in Azure Security

Just-in-time VM access is a control that restricts inbound access to virtual machines until access is explicitly needed.

Just-in-time (JIT) VM access locks down inbound traffic to Azure virtual machines until access is explicitly needed, reducing exposure to attacks against management ports. section 7.2.1

Reducing exposed management ports

Leaving VM management ports exposed creates a security risk. JIT VM access reduces that exposure while preserving access when operational work requires it. section 7.2.1

How Azure Security covers it

How deep it goes
Defines the security purpose and outcome but does not provide configuration steps or implementation commands.
Examples
Uses exposed management ports and Defender for Servers plan comparisons as concrete security examples.
What it assumes
Assumes awareness that exposing VM management ports creates a security risk.
What you can do after
Evaluate how JIT access reduces VM exposure while retaining access for necessary operations.
How it connects
Connects virtual machines with inbound traffic, management ports, attack exposure, and Microsoft Defender for Servers.
Cover of Azure Security
liveBookmanning.com
Read Azure Security on liveBook Get the book at manning.com

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Azure Security. The section links point to the parts of the book it draws on.