securityRules.json

{
  "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
  "contentVersion": "2017.09.01.0",
  "parameters": {
    "Name": {
      "type": "string",
      "metadata": {
        "description": "The name of the resource that is unique within a resource group. This name can be used to access the resource."
      }
    },
    "Description": {
      "type": "string",
      "maxLength": 140,
      "metadata": {
        "description": "A description for this rule. Restricted to 140 chars."
      }
    },
    "access": {
      "type": "string",
      "allowedValues": [
        "Allow",
        "Deny"
      ]
    },
    "destinationAddressPrefix": {
      "type": "string",
      "metadata": {
        "description": "The destination address prefix. CIDR or destination IP range. Asterix '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used."
      }
    },
    "destinationPortRange": {
      "type": "string",
      "metadata": {
        "description": "The destination port or range. Integer or range between 0 and 65535. Asterix '*' can also be used to match all ports."
      }
    },
    "direction": {
      "type": "string",
      "allowedValues": [
        "Inbound",
        "Outbound"
      ],
      "metadata": {
        "description": "The direction of the rule. The direction specifies if rule will be evaluated on incoming or outcoming traffic. Possible values are: 'Inbound' and 'Outbound'."
      }
    },
    "priority": {
      "type": "int",
      "minValue": 100,
      "maxValue": 4096,
      "metadata": {
        "description": "The priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule."
      }
    },
    "protocol": {
      "type": "string",
      "allowedValues": [
        "*",
        "Tcp",
        "Udp"
      ]
    },
    "sourceAddressPrefix": {
      "type": "string",
      "metadata": {
        "description": "The CIDR or source IP range. Asterix '*' can also be used to match all source IPs. Default tags such as 'VirtualNetwork', 'AzureLoadBalancer' and 'Internet' can also be used. If this is an ingress rule, specifies where network traffic originates from."
      }
    },
    "sourcePortRange": {
      "type": "string",
      "metadata": {
        "description": "The source port or range. Integer or range between 0 and 65535. Asterix '*' can also be used to match all ports."
      }
    }
  },
  "variables": {
    "comment": {
      "documentation": "https://docs.microsoft.com/en-us/rest/api/virtualnetwork/networksecuritygroups/createorupdate#definitions_securityrule"
    },
    "securityRule": {
      "name": "[parameters('Name')]",
      "properties": {
        "description": "[parameters('Description')]",
        "protocol": "[parameters('protocol')]",
        "sourcePortRange": "[parameters('sourcePortRange')]",
        "destinationPortRange": "[parameters('destinationPortRange')]",
        "sourceAddressPrefix": "[parameters('sourceAddressPrefix')]",
        "destinationAddressPrefix": "[parameters('destinationAddressPrefix')]",
        "access": "[parameters('access')]",
        "priority": "[parameters('priority')]",
        "direction": "[parameters('direction')]"
      }
    }
  },
  "resources": [
  ],
  "outputs": {
    "securityRule": {
      "type": "object",
      "value": "[variables('securityRule')]"
    }
  }
}