Azure Bastion is a new PaaS that allows Microsoft’s cloud customers to access their virtual machines without a public IP.