Azure services are publicly available over the internet by default.  That works for many services, but sometimes we need to limit access to internal