Azure Bastion is introduced as an alternative to AWS Session Manager for secure access in Azure.Azure Bastion acts as a managed service creating a web interface supporting SSH and RDP for secure access.Creation of a secure environment with instances in a private network accessible only by managed services in Azure is highlighted.Key infrastructure setup including Resource Groups, Virtual Networks, Subnets, and NAT Gateways in Azure is outlined.Using Terraform for resource provisioning in Azure including setting up the initial networking infrastructure.Deployment of a virtual machine in Azure with Ubuntu OS, SSH key setup, and creation of a network interface is detailed.Integration of Azure Bastion for secure remote access to the virtual machine is explained.Enhancing security by limiting access using Network Security Groups and setting up Azure Key Vault for SSH key storage is demonstrated.Detailed steps to store SSH keys in Azure Key Vault and manage access policies for secure key usage are provided.Finalizing security measures by implementing Deny rules in Network Security Groups to restrict access to the virtual machine.