Azure Bastion Host

Azure Bastion is amazing service which is in public preview and soon be in GA. I must say it would take alot of overhead burden of Jump server, you must be wondering why so its just Bastion

Well for starters - its PaaS service so you need to bother for maintaining Jump box that includes Patching , NSG's, Public IP etc etc.

It provides secure and seamless RDP/SSH connectivity to your VM's directly in the Azure portal over SSL.

When you connect via Bastion your VM doesnt need Public IP Address, doesn't need additional agent pt any piece of software.

You are not exposing your VM's to public internet so your VM's automatically protected again port scanning by malicious users.

Things to keep in mind while creating Azure Bastion :

• You can create from Public preview link or register the provider.
•  You need a subnet of /27 with name AzureBastionSubnet
• It takes little more time than VM creation may be because its in Preview.
• While creating you need to select the Vnet where you want o place it.
• Once created you need to go to that VM that you want to connect to and once you hit connect you would have Bastion option where you need to put your credential and RDP will open in the browser.
• You only need to allow the RDP on NSGs from Bastion

Now lets register the provider and create Bastion :

Register-AzProviderFeature -FeatureName AllowBastionHost -ProviderNamespace Microsoft.Network

Register-AzResourceProvider -ProviderNamespace Microsoft.Network

Get-AzProviderFeature -FeatureName AllowBastionHost -ProviderNamespace Microsoft.Network

Now go to the Azure portal - preview and create Bastion 

You need to fill the below details -

Once created you go to any VM that you want to connect via Bastion and you would have following options to work with , and your RDP will open in the browser.