Azure Bastion for external contractors

Question

Hi, I was wondering if it is safe to use Azure Bastion to allow 3rd party external contractors access to specific servers in my vnet, or should it only be used for my own staff to connect in?

I would just want to allow specific accounts RDP access to certain vms. I could then control access to the azure portal for them with aad accounts and conditional access policies and permissions to the servers.

Apologies if this is an obvious question, as I know Bastion is a PaaS jump box service.

Thanks,

Simmo

Answer 1

@Simon Cassar , A bastion host provides secure and seamless Remote Desktop Protocol (RDP) connectivity to your VMs directly in the Azure portal over SSL. When you connect via a bastion host, your VMs don't need a public IP address. You should be able to provide access to your legitimate contractors as there are no identical public IPs involved here.

----------

Please do not forget to "Accept the answer" wherever the information provided helps you to help others in the community.

Answer 2

Is it possible to provide access on scoped servers to contractors using shared Bastion service? I mean to ask if there are 10 servers spread across multiple resource groups provide access to contractors only on 1 resource group to view servers and other servers residing in other resource group shouldn't be visible to contractors?