Hello Ali ,
Thanks for reaching out to Microsoft Q and A Forum , Here is a precise answer for your question:
Current Cost Justification
Azure Bastion is a managed jump host that stays running and costs about $0.19/hour (~$140/month) plus data. If you don’t use it, you can delete the Bastion resource to stop the charges.
Workaround
A Public IP for a VM costs roughly $3–4/month plus minimal data charges, so it’s much cheaper.
Risk's To handle
The risk is that exposing RDP/SSH directly to the internet increases attack surface. To mitigate, restrict source IPs in the Network Security Group, use just-in-time VM access, and enforce strong credentials or SSH keys.
Reference Docs:
- Bastion pricing & overview: https://free.blessedness.top/azure/bastion/bastion-overview
- Public IP security: https://free.blessedness.top/azure/virtual-network/ip-services/public-ip-addresses#security-considerations
- Just-in-time access: https://free.blessedness.top/azure/defender-for-cloud/just-in-time-vm-access
Please do consider accepting the answer if this was helpful Or Do get back if you have any further questions on the same.