Service tag
A service tag is a provider-managed identifier representing the IP address ranges associated with a category of cloud services.
Microsoft Azure in Action
A service tag is a provider-managed identifier representing a group of cloud service IP address ranges.
- How it is used
- Uses provider-managed service groups in network security group rules instead of hardcoded IP addresses.
- How deep it goes
- Defines service tags and explains their NSG source or destination role, without detailing range-update mechanics.
- Examples
- Uses AppService, AzureLoadBalancer, and Sql as example service tags, including Azure Load Balancer in a default NSG rule.
- What you can do after
- Configure network security group rules that track Azure service ranges without manually maintaining changing IP addresses.
Azure Security
An Azure service tag is a managed identifier representing the IP address prefixes used by a category of Azure services.
- How it is used
- Controls inbound Azure App Service access by grouping changing service IP prefixes behind a named rule.
- How deep it goes
- Explains rule types, priority, limits, and CLI configuration, but stops short of service-tag maintenance internals.
- Examples
- Uses an Azure Front Door rule with AzureFrontDoor.Backend, priority 200, and an x-azure-fdid header.
- What you can do after
- Apply it via Azure CLI to create and inspect a service tag–based App Service access restriction.
Related concepts
- network security groupused by · A network security group is an Azure access-control resource that filters inbound and outbound network traffic using prioritized security rules.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.

