docs: Remove unnecessary Bastion resources and fix VM creation command in Network Watcher IP flow verify PowerShell quickstart

Author: asudbring

articles/network-watcher/diagnose-vm-network-traffic-filtering-problem-powershell.md

@@ -6,7 +6,7 @@ author: halkazwini
 ms.author: halkazwini
 ms.service: azure-network-watcher
 ms.topic: quickstart
-ms.date: 09/23/2025
+ms.date: 02/17/2026
 ms.custom: devx-track-azurepowershell, mode-api
 
 # Customer intent: "As a cloud administrator, I want to diagnose network traffic filter issues on a virtual machine using IP flow verify, so that I can identify and resolve security rules causing connectivity problems."
@@ -41,34 +41,18 @@ In this section, you create a virtual network and a subnet in the East US region
     New-AzResourceGroup -Name 'myResourceGroup' -Location 'eastus' 
     ```
 
-1. Create a subnet configuration for the virtual machine subnet and the Bastion host subnet using [New-AzVirtualNetworkSubnetConfig](/powershell/module/az.network/new-azvirtualnetworksubnetconfig).
+1. Create a subnet configuration for the virtual machine subnet using [New-AzVirtualNetworkSubnetConfig](/powershell/module/az.network/new-azvirtualnetworksubnetconfig).
 
     ```azurepowershell-interactive
-    # Create subnets configuration.
+    # Create subnet configuration.
     $Subnet = New-AzVirtualNetworkSubnetConfig -Name 'mySubnet' -AddressPrefix '10.0.0.0/24'
-    $BastionSubnet = New-AzVirtualNetworkSubnetConfig -Name 'AzureBastionSubnet' -AddressPrefix '10.0.1.0/26'
     ```
 
 1. Create a virtual network using [New-AzVirtualNetwork](/powershell/module/az.network/new-azvirtualnetwork).
 
     ```azurepowershell-interactive
     # Create a virtual network.
-    New-AzVirtualNetwork -Name 'myVNet' -ResourceGroupName 'myResourceGroup' -Location 'eastus' -AddressPrefix '10.0.0.0/16' -Subnet $Subnet,$BastionSubnet
-    ```
-
-1. Create a public IP address for Azure Bastion using [New-AzPublicIpAddress](/powershell/module/az.network/new-azpublicipaddress).
-
-    ```azurepowershell-interactive
-    # Create a public IP address for Azure Bastion.
-    New-AzPublicIpAddress -ResourceGroupName 'myResourceGroup' -Name 'myBastionPublicIP' -Location 'eastus' -AllocationMethod 'Static' -Sku 'Standard'
-    ```
-
-1. Create an Azure Bastion host using [New-AzBastion](/powershell/module/az.network/new-azbastion).
-
-    ```azurepowershell-interactive
-    # Create an Azure Bastion host.
-    $vnet = Get-AzVirtualNetwork -ResourceGroupName 'myResourceGroup' -Name 'myVNet'
-    New-AzBastion -ResourceGroupName 'myResourceGroup' -Name 'myBastion' -PublicIpAddressRgName 'myResourceGroup' -PublicIpName 'myBastionPublicIP' -VirtualNetworkRgName 'myResourceGroup' -VirtualNetworkName 'myVNet' -Sku 'Developer'
+    New-AzVirtualNetwork -Name 'myVNet' -ResourceGroupName 'myResourceGroup' -Location 'eastus' -AddressPrefix '10.0.0.0/16' -Subnet $Subnet
     ```
 
 1. Create a default network security group using [New-AzNetworkSecurityGroup](/powershell/module/az.network/new-aznetworksecuritygroup).
@@ -81,8 +65,27 @@ In this section, you create a virtual network and a subnet in the East US region
 1. Create a virtual machine using [New-AzVM](/powershell/module/az.compute/new-azvm).
 
     ```azurepowershell-interactive
-    # Create a Linux virtual machine using the latest Ubuntu 20.04 LTS image.
-    New-AzVm -ResourceGroupName 'myResourceGroup' -Name 'myVM' -Location 'eastus' -VirtualNetworkName 'myVNet' -SubnetName 'mySubnet' -SecurityGroupName 'myVM-nsg' -Image 'Canonical:0001-com-ubuntu-server-focal:20_04-lts-gen2:latest' -GenerateSshKey -SshKeyName 'mySSHKey'
+    # Create a credential object
+    $securePassword = ConvertTo-SecureString ' ' -AsPlainText -Force
+    $cred = New-Object System.Management.Automation.PSCredential ('azureuser', $securePassword)
+
+    # Define the virtual machine parameters
+    $vmParams = @{
+        ResourceGroupName = 'myResourceGroup'
+        Location = 'eastus'
+        Name = 'myVM'
+        Image = 'Ubuntu2204'
+        Credential = $cred
+        VirtualNetworkName = 'myVNet'
+        SubnetName = 'mySubnet'
+        SecurityGroupName = 'myVM-nsg'
+        PublicIpAddressName = ''
+        SshKeyName = 'mySSHKey'
+        GenerateSshKey = $true
+    }
+
+    # Create the virtual machine
+    New-AzVM @vmParams
     ```
 
 ## Test network communication using IP flow verify