General availability: Service tags for NSGs

Service tags simplify security for Azure virtual machines and Azure virtual networks by enabling you to easily restrict network access to just the Azure services that you use.

You can use service tags in your network security group (NSG) rules to allow or deny traffic to a specific Azure service globally or per Azure region. Azure provides the maintenance of IP addresses underlying each tag. This preview includes Storage, Sql, and AzureTrafficManager tags. 

For more information, see the documentation.