Azure Landing Zones Documentation
Home GitHub Issue Toggle Dark/Light/Auto mode Toggle Dark/Light/Auto mode Toggle Dark/Light/Auto mode Back to homepage

4 - Turn off Bastion host

You can choose to not deploy a Bastion Host. In order to do that, you need to update the Bastion Host configuration.

The steps to follow are:

  1. Make the following settings changes by searching for the keys and updating or removing the values
    Setting TypeParent block(s)KeyActionCountNotes
    linecustom_replacements > names<region>_bastion_host_nameDelete (optional)1+<region> is the relevant region (e.g. primary or secondary)
    linecustom_replacements > names<region>_bastion_public_ip_nameDelete (optional)1+<region> is the relevant region (e.g. primary or secondary)
    linecustom_replacements > names<region>_bastion_subnet_address_prefixDelete (optional)1+<region> is the relevant region (e.g. primary or secondary)
    linehub_and_spoke_vnet_virtual_networks > bastion OR virtual_wan_virtual_hubs > bastionenabledUpdate setting to false1+There will be two instances for a multi-region deployment