Massive facepalm Microsoft - How about enabling NSG ALLOW for new service tags AzurePlatformDNS AzurePlatformLKM AzurePlatformIMDS
I want to DENY outbound Internet access (override the default)
I want to ALLOW AzurePlatform services. Like KMS, DNS.
Microsoft listens, and gives me new Service Tags - great - and then prevents me from using them??? WTH
See error below (by the way, what do YOU think of the SPELLING ERROR in the message provided in the portal - it seems to underline the facepalm quite succinctly in my opinion)
Failed to create security rule 'AllowAzurePlatformDNSOutbound'. Error: Security rule has invalid Accees type. Value provided: Allow Allowed values: Deny.
Olav Rønnestad Birkeland commented
For one seccond I thought my PowerShell-Jitsu was in bad shape, but it's actually by design.