• Allows RDP/SSH connectivity to your virtual machines directly over TLS from portal or from clients on our machines
• Can access [[202404161835 Azure VM Basics|Azure VM]] using their [[202407281228 Azure Private IP Address|Azure Private IP Address]] so no need to assign [[202407271143 Public IP address allows inbound access based on tier in Azure|Public IP Address]]
• No need to manage [[202404141419 Network Security Groups|NSG]] each time we add a VM

SKUs

• Developer
  • No access to peered [[202404121703 Azure VNet|VNets]]
  • Connect linux vm with SSH
  • connect windows VM with RDP
• Basic
  • Connect linux vm with SSH
  • connect windows VM with RDP
• Standard
  • In addition to above, connect Linux VM with RDP and Windows VM with SSH
• Premium

Subnet Requirements

• need to create a subnet in vnet with name ‘AzureBastionSubnet’
• Subnet size must be /26 or larger (/24,/25, etc)

---

references:

Overview