azure-bastion

Guide Azure Bastion deployment, troubleshooting, and optimization across hub/spoke topologies.

Updated Mar 9, 2026
One-click install
npx skills add https://github.com/RobGibbens/ConnectionsExplorer --skill azure-bastion-robgibbens
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: azure-bastion
Source: https://github.com/RobGibbens/ConnectionsExplorer/tree/main/.github/skills/azure-bastion
Command: npx skills add https://github.com/RobGibbens/ConnectionsExplorer --skill azure-bastion-robgibbens

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Azure Bastion configuration and deployment can be complex and error-prone. This skill provides expert guidance for development, troubleshooting, and optimization of Azure Bastion solutions, helping teams secure remote access and streamline administration. Note: It is not intended for Azure Virtual Network, Azure Virtual Machines, Azure VPN Gateway, or Azure Firewall use cases; see azure-virtual-network, azure-virtual-machines, azure-vpn-gateway, and azure-firewall for those contexts.

Core Features & Use Cases

  • Troubleshooting connectivity, performance, and access issues with Azure Bastion.
  • Architecture & design patterns for Bastion deployments including hub/spoke and private-only topologies.
  • Security hardening, RBAC, monitoring, and integration with AKS, VM Scale Sets, and private networks; includes best-practice checklists.
  • Use cases involving secure remote access in multi-tenant environments, cost-aware deployment sizing, and seamless user experiences.

Quick Start

Ask for Bastion guidance targeting your current deployment scenario and constraints.

Frequently Asked Questions about azure-bastion

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure Azure Bastion in a hub and spoke topology?

Azure Bastion provides secure and seamless RDP and SSH access to virtual machines directly from the Azure portal over TLS. It eliminates the need for a public IP address on your VMs, reducing exposure to internet-based threats.

What is the best way to secure remote access to Azure VMs without a public IP?

Azure Bastion provides secure RDP and SSH access to virtual machines directly from the Azure portal over TLS. It eliminates the need for a public IP address on your VMs, reducing exposure to internet-based threats while streamlining administration.

How do I troubleshoot Azure Bastion connectivity and access issues?

Troubleshoot Azure Bastion connectivity by verifying network security group rules, checking RBAC permissions, and validating that the target VM's network configuration allows traffic. Reviewing Bastion session logs helps identify specific access or performance bottlenecks.

Does Azure Bastion work with AKS clusters and VM scale sets?

Yes, Azure Bastion integrates with AKS clusters and VM scale sets by providing a secure access pathway through private networks. You can route administrative traffic through Bastion to reach private cluster nodes without exposing them externally.

How do I choose the right Azure Bastion SKU for cost-aware deployment?

Choosing the right Azure Bastion SKU depends on your required connection limits and features. Evaluate your concurrent session needs and compare Basic versus Standard SKUs to balance cost-aware deployment sizing with necessary performance and security features.