Artifacts: Custom ARM templates and scripts installed at provisioning time

Auto-shutdown: Enforce nightly shutdown (e.g., 7 PM)

JIT Access: Just-In-Time port opening via Azure Security Center

Isolated resource group

NSGs controlling inbound/outbound traffic

Install Azure Monitor agent via artifact

Log VM boot and SSH/RDP events