Virtual Machine has Just-in-Time (JIT) access enabled

# Enable JIT by creating a Security Center JIT policy for the VM
resource "azurerm_security_center_jit_network_access_policy" "<example_resource_name>" {
  name                = "default"
  location            = "<LOCATION>"
  resource_group_name = "<example_resource_name>"

  virtual_machines {
    id = "<example_resource_id>" # Critical: VM ID included in the JIT policy enables JIT for this VM

    ports {
      number                           = 22
      protocol                         = "*"
      allowed_source_address_prefixes   = ["*"]
      max_request_access_duration       = "PT3H" # Critical: Minimal port config required by JIT
    }
  }
}

// Bicep: Enable JIT for a VM by creating a JIT policy that references the VM
param location string = "<LOCATION>"
param vmId string = "/subscriptions/<SUBSCRIPTION_ID>/resourceGroups/<example_resource_name>/providers/Microsoft.Compute/virtualMachines/<example_resource_name>"

resource jit 'Microsoft.Security/locations/jitNetworkAccessPolicies@2020-01-01' = {
  name: '${location}/default'
  properties: {
    virtualMachines: [
      {
        id: vmId // Critical: Adding the VM ID enables JIT for this VM
        ports: [
          {
            number: 22
            protocol: '*'
            allowedSourceAddressPrefix: ['*']
            maxRequestAccessDuration: 'PT3H' // Critical: Minimal required port configuration for JIT
          }
        ]
      }
    ]
  }
}