A company hosts several virtual machines in Azure. The security team wants administrators to connect to these VMs using RDP and SSH securely through the Azure portal, without exposing the VMs to the public internet by assigning them public IP addresses. Which Azure service should they deploy?