Amazon Web Services → Microsoft Azure
Azure equivalent of AWS Systems Manager Session Manager
AWS Systems Manager Session Manager and EC2 Instance Connect Endpoint map to Azure Bastion.
About AWS Systems Manager Session Manager
| Provider | Amazon Web Services |
|---|---|
| Status | Generally available |
| What it is | Browser or CLI shell access and port forwarding to managed nodes through the SSM Agent, with no open inbound ports, bastion hosts, or SSH keys. Sessions are logged and IAM-controlled. |
| Documentation | docs.aws.amazon.com |
| Pricing | Official pricing page |
Azure mappings (1)
| Capability | Azure equivalent | Match |
|---|---|---|
| Secure remote access to VMs | Azure Bastion | Partial match |
VM security & operations(1)
Secure remote access to VMs Partial match
AWS Systems Manager Session Manager and EC2 Instance Connect Endpoint map to Azure Bastion. Bastion is a managed RDP/SSH gateway, while Session Manager is agent-based shell access through the Systems Manager service.
- How it works. Session Manager uses the SSM Agent's outbound connection, with no inbound ports and IAM-controlled, logged sessions. EC2 Instance Connect Endpoint is a VPC endpoint that proxies SSH or RDP to private IPs. Bastion is a managed service in your VNet (or shared, for the Developer SKU) that brokers RDP and SSH over TLS.
- Logging. Session Manager can log session content to CloudWatch Logs or S3. Bastion Premium offers graphical session recording.
- Azure Run Command and serial console cover the "run a script without logging in" case (like SSM Run Command).