Network security groups and service endpoints help you secure your virtual machines and Azure services from unauthorized network access.