NSG blocks inbound UDP from the Internet

# Modify the existing NSG rule to deny UDP from the Internet
resource "azurerm_network_security_rule" "<example_resource_name>" {
  name                        = "<example_resource_name>"  # existing rule name
  resource_group_name         = "<example_resource_name>"
  network_security_group_name = "<example_resource_name>"
  priority                    = 100
  direction                   = "Inbound"
  access                      = "Deny" # CRITICAL: Change access to Deny to remove the Allow condition
  protocol                    = "Udp"
  source_address_prefix       = "*"
  destination_address_prefix  = "*"
  source_port_range           = "*"
  destination_port_range      = "*"
}

// Update the existing NSG rule to block UDP from the Internet
resource nsg 'Microsoft.Network/networkSecurityGroups@2023-09-01' existing = {
  name: '<example_resource_name>'
}

resource rule 'Microsoft.Network/networkSecurityGroups/securityRules@2023-09-01' = {
  name: '${nsg.name}/<example_resource_name>'
  properties: {
    priority: 100
    direction: 'Inbound'
    access: 'Deny' // CRITICAL: Change access to Deny so UDP from Internet is not allowed
    protocol: 'Udp'
    sourceAddressPrefix: '*'
    destinationAddressPrefix: '*'
    sourcePortRange: '*'
    destinationPortRange: '*'
  }
}