The service tag representing public IP address space beyond the VNet. Denying traffic from Internet leaves traffic within the VNet unaffected.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Internet (service tag) in context, with comparison tables and the common traps.
Terms in this definition
- Service tag
A set of IP prefixes for an Azure service, kept up to date by Microsoft (such as AzureKeyVault or Storage, with optional regional variants), that can be used as the source or destination in NSG rules.
- Public IP address
Resource in Azure for an IPv4 or IPv6 address routable on the internet, attached to a NIC, firewall, gateway, load balancer or Bastion host. Allocation, zone support and default security depend on its SKU.
- VNet
A private network belonging to a single subscription and region and covering all of that region's availability zones. A VM can only use a VNet located in the same region.