Add Bastion deployment

[baatch]

Please add the option to deploy Bastion to the data-landing-zone templates. It was added to the data management zone portal deployment for Enterprise scale analytics (Azure/data-management-zone@3ec03c8)

[devlace]

Agreed. Azure Bastion would be very useful for connectivity to the deployment.

[marvinbuss]

Thanks alxp (@baatch) and Lace Lofranco (@devlace). We are currently monitoring feedback and evaluate whether we should add this to the core setup. We will keep this issue open to track feedback.

[MiguelElGallo]

I agree that Bastion is needed. Otherwise after deployment how will you connect ? Or did I miss something.

[marvinbuss]

Hi Miguel P Z (@MiguelElGallo),
We already have a template that is referenced here: https://github.com/Azure/data-management-zone/blob/main/docs/guidance/DataManagementAnalytics-ConnectToEnvironmentsPrivately.md

The question is whether we should add Bastion to the default Data Landing Zone deployment.

[MiguelElGallo]

Alright, that is good enough Thanks!

[MiguelElGallo]

I deployed the Bastion, with the "Deploy to Azure" button, in the document says:" 5. Once logged into the VM in a separate browser tab, go to Microsoft Edge and open Azure Portal. From here, navigate to the {prefix}-{environment}-product-synapse001 Synapse workspace inside the {prefix}-{environment}-shared-product resource group for data exploration."
But the bastion cannot browse the internet, nor portal.azure.com.
Is that point 5 correct?
Thanks!

[marvinbuss]

Hi Miguel P Z (@MiguelElGallo),
Have you changed anything on the network/firewall setup?
We have whitelisted *azure.com in the firewall in order to allow you browsing to the Azure Portal. What URL are you trying to open?
Google is not whitelisted, but you should be able to directly open the page.

[MiguelElGallo]

Hi,
I was trying to open: dl2202-dev-product-synapse001.privatelink.dev.azuresynapse.net which should be the name of the Synapse Workspace. We did not deploy the Firewall, because we have one already.
Still the bastion should be able to access Synapse Studio, but not sure if that is the URL I should be using. Any ideas?
Thanks!
Miguel