Scenarios/Secure-Baseline/bicep/01-Hub/firewall/afwp-rule-collection-groups-network-lockdown.jsonc (26 lines of code) (raw):

[ { "name": "<FIREWALL_POLICY_RULE_GROUP_NAME_PLACEHOLDER>", "priority": 300, "ruleCollections": [ { "name": "DenyAll", "priority": 301, "ruleCollectionType": "FirewallPolicyFilterRuleCollection", "action": { "type": "Deny" }, "rules": [ { "name": "DenyAllIps", "ruleType": "NetworkRule", "ipProtocols": ["Any"], "sourceAddresses": ["*"], "destinationAddresses": ["*"], "destinationPorts": ["*"] } ] } ] } ]