Default Network Security Group configuration insecure

[azure]

Default Network Security Group configuration insecure

[alexmg]

I received an email notification with a comment that has since been deleted. I assume you no longer want that response to be public and will not repost it here.

I am a little surprised that Microsoft is placing convenience over security, but the decision to put machines onto the internet with the standard SSH port open for all source IP addresses is yours to make.

Instances of SQL Server require users to add firewall rules and the process is not that arduous. I think someone capable of performing data science activities would not find such a step challenging.

Yes, there is the Enterprise security and guidance, but "Secure by default" should not just be for the enterprise. I would guess that many of the users deploying DSVM are employees of an enterprise and are doing so to avoid IT policies in the first place.