use network security groups to secure network traffic for VMs running on Azure;use virtual network service endpoints to control network traffic to and from Azure services, such as storage or database services

 use network security groups to secure network traffic for VMs running on Azure;use virtual network service endpoints to control network traffic to and from Azure services, such as storage or database services