Azure Bastion and Secure Administrative Access
Harden administrative access to an Azure VM with restrictive NSG rules, verify the lockdown with effective security rules, then review the Azure Bastion design and provisioning workflow without paying for a Bastion host.
Lab Overview
Practice the secure administrative access patterns that Azure administrators are expected to know for AZ-104.
You will build an isolated virtual network, attach a Network Security Group that denies broad inbound SSH and allows it only from a single trusted source, deploy a small Linux VM into the protected subnet, and prove the restriction using Azure effective security rules. You will then perform an Azure Bastion architecture and design review using live SKU and subnet inspection, and walk through the exact provisioning commands as a guided scenario.
Azure Bastion is slow and costly to provision, so the gradeable work is the NSG SSH lockdown. Bastion is covered through a design review and a documented provisioning walkthrough that you can run in your own subscription later.
What You'll Learn
Prepare an Azure CLI workspace and an isolated virtual network for secure access work
Create a Network Security Group that denies broad inbound SSH and allows it only from a single trusted source
Deploy a small Linux VM into the protected subnet and confirm the lockdown using effective security rules
Review the Azure Bastion architecture and subnet requirements using live CLI inspection
Walk through the Azure Bastion provisioning commands as a guided, cost-aware scenario
Prerequisites
Basic command line familiarity
Basic understanding of Azure resource groups and virtual networks
Basic understanding of network security groups and inbound rules
Technologies Covered
Part of a Course
This lab is part of the Microsoft Azure Administrator (AZ-104) course
View All CoursesChoose your plan
Simple, Transparent Pricing
Unlock full access to TeKanAid courses, labs, and bootcamps
Just exploring? Start free below. Want the full experience? Try Premium free for 7 days (card required, $0 today).
Pro
All courses, with lab scripts to run on your own machine
Renews automatically. Cancel anytime.
Final price verified at checkout.
- Full access to all courses
- Lab scripts to download and run on your own machine (hosted labs not included)
- Progress tracking
- Certificate of completion
- Community access
- Bootcamp participation
- New content access
Premium
Full access, including unlimited hosted labs
Renews automatically. Cancel anytime.
Final price verified at checkout.
- Everything in Pro
- Unlimited hands-on labs, fully hosted on TeKanAid Academy (nothing to set up)
- Lab AI Assistant
- Accelerator bootcamps with live office hours
- Priority support
Prefer a single course?
Purchase individual courses for a one-time fee of $79. Full access to course content, quizzes, certificates, and community features, lab access is not included.
Browse CoursesJust exploring? Start free, no account needed
Three free ways to start. All bridge into the paid Premium catalog when you're ready.
Not ready to commit? The crash course is email-only. No academy account required.
Ready to Get Started?
Start this hands-on lab and build real-world Platform Engineering skills
Get Access Now