Redirecting to
https://techcommunity.microsoft.com/t5/azure-infrastructure-blog/deny-inbound-nsg-rule-creation-via-azure-policy/ba-p/4241803