Azure - Can not allow inbound traffic, denied by Policy

Question

so I am learning Azure now, I created a Linux VM. When I tried to connect using SSH, the connection timed out. so I checked on Inbound Rules, and it appears that I need to allow port 22. I know this is not recommended. However, when i tried to create the rule, the validation failed because a policy is set up to block this. I checked on Policy, and there is a policy called "Deny NSG to allow Inbound Traffic" , and the scope is Tenant Root Group.

I dont know if this policy is created by default, and I cant seem to override or put exclusion.
So, how do I connect to my Linux VM, if all inbound traffic is not permitted?

Thanks,

Answer 1

@Teguh Wilidarma (SE-ID) ,

Based on the information you are providing, it seems that the Azure Administrator of your Subscription has created a Policy that does not allow people to create inbound rules.

Since you told us you are new to Azure, you should know that Azure Policy helps to enforce organizational standards and to assess compliance at-scale.

That said, my suggestion is either ask the person to add the rule to your VM or to remove the policy, so you can add the NSG to your VM and then enable the policy back once you are done.

Please let us know if you need further assistance.

Thanks,
Vinicius Deschamps
https://viniciusdeschamps.com.br