Diagram
A system architecture diagram showing how an administrator requests Just-in-Time access via Microsoft Defender for Cloud, which temporarily opens an NSG port for Azure Bastion to securely connect to a target VM over RDP or SSH without a public IP.
Integrating JIT with Azure Bastion
Using JIT and Azure Bastion together creates a layered security model. You can configure your JIT policy to only allow access requests originating from the IP range used by your Azure Bastion service. This means an administrator must first get JIT approval, which temporarily opens the port, and then they must connect through the Bastion host. This combination enforces that access is both time-limited and channeled through a secure, managed service, validating connectivity without any public IP exposure on the VMs themselves.
Domain 3 of 3
8 practice questions
Practice this DomainLast updated