{ "operation": "Microsoft.Network/networkSecurityGroups/securityRules/write", "rule": { "direction": "Inbound", "access": "Allow", "protocol": "TCP", "sourceAddressPrefix": "203.0.113.0/24", "sourcePortRange": "*", "destinationAddressPrefix": "*", "destinationPortRange": "443", "priority": 300 } }