Which service provides secure Remote Desktop connectivity to Azure virtual machines?

Azure Bastion is the service that provides secure Remote Desktop connectivity to Azure virtual machines. It allows users to connect to their virtual machines using the Azure portal over HTTPS without needing an exposed public IP address on those virtual machines. This enhances security as it minimizes the attack surface and reduces the risk of exposure to threats that come from using a public IP address for RDP or SSH access.

Azure Bastion operates directly from the Azure portal, streamlining the process of connecting to virtual machines without the need for a VPN or managing public IPs. Furthermore, it provides seamless and secure RDP and SSH connectivity, ensuring that the connection is secure and that sensitive data transmitted over the connection is not compromised.

The other services mentioned, like Azure Firewall, Network Security Groups (NSGs), and Azure Sentinel, serve different purposes in the Azure security framework. Azure Firewall is utilized for enforcing security policies and filtering traffic, NSGs are used to define security rules for network traffic to and from Azure resources, and Azure Sentinel is a Security Information and Event Management (SIEM) solution for proactive threat detection and response. These services are important for overall Azure security but do not provide the specific functionality of enabling secure Remote Desktop access to virtual machines like Azure Bastion does.