liveBook · Manning

Service tag

As explained in Microsoft Azure in Action

A service tag is a provider-managed identifier representing a group of cloud service IP address ranges.

A service tag is a Microsoft-managed name for a group of Azure service IP address ranges. It lets you refer to services without hardcoding addresses that may change. section 4.3

Use a service tag as the source or destination in a network security group rule. That keeps access rules readable while Microsoft maintains the underlying ranges. section 4.3

Allowing Azure Load Balancer traffic

A default inbound NSG rule can use Azure Load Balancer as its source and allow traffic to any destination. The tag represents the service group rather than a manually maintained IP list. section 4.3

Table 4.3 Inbound security rules for a default NSG

Priority

Name

Port

Protocol

Source

Destination

Action

300

SSH

22

TCP

Any

Any

Allow

65000

AllowVNetInbound

Any

Any

VNet

VNet

Allow

65001

AllowAzureLoad­Balancer InBound

Any

Any

Azure Load Balancer

Any

Allow

65002

DenyAllInbound

Any

Any

Any

Any

Deny

Inspect the default NSG rule table to see a service tag used in a real source field alongside priority, protocol, and action. section 4.3

How Microsoft Azure in Action covers it

How deep it goes
Defines service tags and explains their NSG source or destination role, without detailing range-update mechanics.
Examples
Uses AppService, AzureLoadBalancer, and Sql as example service tags, including Azure Load Balancer in a default NSG rule.
What it assumes
Assumes familiarity with network security group rules, ports, protocols, and source and destination fields.
What you can do after
Configure network security group rules that track Azure service ranges without manually maintaining changing IP addresses.
How it connects
Connects service tags with network security groups, IP address ranges, CIDR ranges, and Azure services.

Also explained in

Compare how 2 books explain service tag →

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Microsoft Azure in Action. The section links point to the parts of the book it draws on.