Merge pull request #224817 from asudbring/ddos-fixes

Fix intro paragraph

Author: prmerger-automator[bot]

articles/bastion/tutorial-protect-bastion-host.md

@@ -11,11 +11,7 @@ ms.author: allensu
 
 # Tutorial: Protect your Bastion host with Azure DDoS protection
 
-This tutorial helps you deploy Azure Bastion from the Azure portal using your own specified manual settings. When you use manual settings, you can specify configuration values such as instance counts and the SKU at the time of deployment. After Bastion is deployed, you can connect (SSH/RDP) to virtual machines in the virtual network via Bastion using the private IP address of the VM. When you connect to a VM, it doesn't need a public IP address, client software, agent, or a special configuration.
-
-In this tutorial, you deploy Bastion using the Standard SKU tier and adjust host scaling (instance count). After the deployment is complete, you'll enable Azure DDoS protection for the Bastion virtual network. Then you'll connect to your VM via private IP address. If your VM has a public IP address that you don't need for anything else, you can remove it.
-
-Azure Bastion is a PaaS service that's maintained for you, not a bastion host that you install on one of your VMs and maintain yourself. For more information about Azure Bastion, see [What is Azure Bastion?](bastion-overview.md)
+This article helps you create an Azure Bastion host with a DDoS protected virtual network. Azure DDoS protection protects your publicly accessible bastion host from Distributed Denial of Service attacks.
 
 > [!IMPORTANT]
 > Azure DDoS Protection incurs a cost when you use the Standard SKU. Overages charges only apply if more than 100 public IPs are protected in the tenant. Ensure you delete the resources in this tutorial if you aren't using the resources in the future. For information about pricing, see [Azure DDoS Protection Pricing]( https://azure.microsoft.com/pricing/details/ddos-protection/). For more information about Azure DDoS protection, see [What is Azure DDoS Protection?](../ddos-protection/ddos-protection-overview.md).
@@ -24,7 +20,7 @@ In this tutorial, you'll learn how to:
 
 > [!div class="checklist"]
 > * Deploy Bastion to your VNet.
-> * Enable Azure DDoS Protection.
+> * Create a DDoS protection plan and enable DDoS protection.
 > * Connect to a virtual machine.
 > * Remove the public IP address from a virtual machine.