Azure: Application Security Group example

az network vnet create \
  -g $RG_NAME \
  --name $PREFIX-vnet \
  --address-prefix 10.0.0.0/16 \
  --subnet-name $PREFIX-subnet-public \
  --subnet-prefix 10.0.0.0/24
az network asg create --name $PREFIX-pokemon-asg --location westeurope --resource-group $RG_NAME
az network nsg create --name $PREFIX-pokemon-nsg --location westeurope --resource-group $RG_NAME
az network nsg rule create \
  --resource-group $RG_NAME \
  --name $PREFIX-pokemon-nsg-web \
  --nsg-name $PREFIX-pokemon-nsg \
  --priority 200 \
  --access Allow \
  --destination-asgs $PREFIX-pokemon-asg \
  --source-address-prefixes Internet \
  --destination-port-ranges 80 8080 \
  --protocol Tcp \
  --destination-asgs $PREFIX-pokemon-asg \
  --description "Allow traffic from internet to pokemon app"