You deploy multiple Azure Virtual Desktop session hosts that have only private IP addresses. You need to ensure that administrators can initiate an RDP session to the session hosts by using the Azure portal. What should you implement?
Azure Bastion is a new fully platform-managed PaaS service you provision inside your virtual network. It provides secure and seamless RDP/SSH connectivity to your VMs directly in the Azure portal over SSL. When you connect via Azure Bastion, your virtual machines do not need a public IP address. Reference: https://azure.microsoft.com/en-us/services/azure-bastion/
