Azure Bastion

Azure Bastion is the intended RDP path for the SQL VM.

The sample config keeps:

network:
  publicIp:
    enabled: false

Bastion still has its own public IP because that is how the dedicated Bastion shape is reached.

Current Fields

bastion:
  subnetAddressPrefix: "192.168.2.0/24"
  sku: "Basic"
  publicIp:
    allocationMethod: "Static"
    idleTimeoutInMinutes: 4
    sku: "Standard"

The script creates or reuses AzureBastionSubnet, the Bastion public IP, and the Bastion host.

Advanced Bastion features such as native-client tunneling, shareable links, session recording, private-only Bastion, or host scaling are not modeled yet.