Can you connect to a VM that does not have an external IP address using a bastion host?
Using bastion host, you can log into the bastion host first, and then into the target private VM.
The Azure CLI can be used to find virtual machine images to deploy on Arm instances.
The "vm image" command is a good way to find virtual machine images.
Terraform apply is used to apply changes to the configuration.