仮想マシンのPublic IPで、AzureのPaaSやSaaSとのみ通信させる方法

https://blogs.technet.microsoft.com/keithmayer/2016/01/12/step-by-step-automate-building-outbound-network-security-groups-rules-via-azure-resource-manager-arm-and-powershell/