research-hub/azure-firewall-rules/ManagementSubnet.jsonc (26 lines of code) (raw):
/*
* Azure Firewall Rule Collection for the management subnet
*/
[
{
"name": "InternetAccess_NW",
"priority": 150,
"ruleCollectionType": "FirewallPolicyFilterRuleCollection",
"action": {
"type": "Allow"
},
"rules": [
{
"ruleType": "NetworkRule",
"name": "HTTP",
"ipProtocols": ["TCP"],
"sourceIpGroups": ["{{managementSubnetRange}}"],
"destinationAddresses": ["*"],
"destinationPorts": [
"80", // HTTP
"443" // HTTPS
]
}
]
}
]