PAW Machine Deployment

Question

Hi,

We currently have a PAM (Privileged Access Management) machine deployed on-premises in our hybrid environment. However, as we plan to adopt a cloud-first strategy in alignment with the Microsoft RAMP guidelines, I would like to understand the best approach for deploying a PAW (Privileged Access Workstation).

Should we continue using a physical PAW machine, or would it be better to move to a cloud-based solution such as Windows 365 or Azure Virtual Desktop (AVD)? What would be the most secure and compliant option in this scenario?

Thanks!