NSG rule targets: application security group vs IP list vs service tag
This sheet compares Application security group, IP address list, Service tag.
| Criterion | Application security group | IP address list | Service tag |
|---|---|---|---|
| Targets | A named set of network interfaces | Explicit addresses you list | A Microsoft-defined range (e.g. VirtualNetwork, AzureLoadBalancer) |
The verdict, the full comparison, 3 rules and 2 traps are part of AZ-104 access. Unlock AZ-104.