AZ-500: Plan and implement security for public access to Azure resources