.. /Azure Bastion Native Client Tunnel
Star

Access
Shell Access

Azure Bastion with the native client feature allows the Azure CLI to open a local tunnel to a VM port through the Bastion host. It gives users SSH and RDP-style access to private VMs from a workstation without a VPN or public IP.

Paths:

Resources:

Detections:

Access

  1. Creates a local listener that forwards to the target VM through Azure Bastion.

    az network bastion tunnel --name <BASTION> --resource-group <RG> --target-resource-id <VM_ID> --resource-port 22 --port <LOCAL_PORT>
    Use case
    Reaching private VMs and tunnelling arbitrary TCP ports.
    Privileges required
    User
    Operating systems
    Windows, Linux, MacOS

Shell Access

  1. SSH to a VM through Bastion using the CLI.

    az network bastion ssh --name <BASTION> --resource-group <RG> --target-resource-id <VM_ID> --auth-type ssh-key --username <USER> --ssh-key <KEY>
    Use case
    Shell access to private VMs.
    Privileges required
    User
    Operating systems
    Windows, Linux, MacOS