Outbound internet connectivity Azure gives a VM through a Microsoft-owned public IP when nothing explicit is configured. Private subnets, the default in VNets created from 31 March 2026, don't get it.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Default outbound access in context, with comparison tables and the common traps.
Terms in this definition
- Get
Key Vault permission on secrets that allows a single secret to be read; App Service Key Vault references need nothing beyond it.
Related terms
- Private subnet
Subnet in which default outbound access is off. Internet access for its VMs must come from a public IP, a NAT gateway or Standard Load Balancer outbound rules.