Query: Ensure an Azure Bastion Host exists

Description

The Azure Bastion service allows secure remote access to Azure Virtual Machines over the Internet without exposing remote access protocol ports and services directly to the Internet. The Azure Bastion service provides this access using TLS over 443/TCP, and subscribes to hardened configurations within an organization's Azure Active Directory service.

Query

Tables used in this query:

• azure_bastion_host
• azure_subscription

Controls using this query:

• 7.1 Ensure an Azure Bastion Host Exists
• 7.1 Ensure an Azure Bastion Host Exists
• 8.1 Ensure an Azure Bastion Host Exists
• Ensure an Azure Bastion Host exists

SQL