| name | bastion-access |
| description | Deploy Azure Bastion (Basic, Standard, Premium) for browser-based SSH/RDP |
Bastion Access
When to use this skill
- Need admin access without public IPs
Key concepts
- Bastion subnet
AzureBastionSubnet /26 minimum.
- Basic — RDP/SSH via portal.
- Standard — native client, file copy, IP-based connection, host scale units, AAD/Kerberos.
- Premium — session recording, private-only Bastion, just-in-time access.
Common pitfalls
- Sharing one Bastion across many spokes without peering — must peer hub-spoke.
References
Validation-first: verify every Azure fact against the Microsoft Learn MCP server (cite the Learn URL); Learn overrides built-in knowledge. If no Learn MCP server is configured, flag the answer ⚠️ unverified and mark specs as indicative. Analysis only — verify against Microsoft documentation before applying.