Named groups that represent the range of IP addresses used by a specific Azure service.
When specifying a source or destination in a Network Security Group rule, you can use a service tag like "Storage" or "Sql" instead of writing out individual IP addresses. Because Microsoft automatically updates the underlying IP ranges when they change, this reduces the maintenance burden of keeping rules up to date.
© 2026 ITBGM