@Brad - DCL , Apologies for the delay in response. Azure Bastion acts as a safe entry proxy between your VM and users. It receives connections from the internet using SSL and connects you back to your VMs using RDP and SSH. It also looks like Remote Desktop Gateway solution or the RDP Web Access.
This acts as a jump box with no RDP in active to avoid malicious users who are using brut forcing attacks to compromise your server. Billing occurs in fixed monthly bases and calculated per hour even when the VMs are turned off.
If you are looking for a feature to pause the bastion host then you can upvote this features request here in this feedback section for its future availability.
----------
Please do not forget to "Accept the answer" wherever the information provided helps you to help others in the community.