Description

Azure Bastion is a service you deploy that lets you connect to a virtual machine using your browser and the Azure portal, or via the native SSH or RDP client already installed on your local computer. Bastion provides secure RDP and SSH connectivity to all of the VMs in the virtual network in which it is provisioned. For more info, see https://learn.microsoft.com/en-us/azure/bastion/bastion-overview

• 

  Recommended Mitigation

  It is recommended to crate Azure Bastion Host within your Azure account subscription.