PSA for Azure users who automate deploys and skip Portal banners: default outbound access is going away for subnets.

Pre-April 1st subnets are grandfathered. New ones are private by default - you can re-enable old outbound behaviour explicitly, or deploy a NAT Gateway (~$36/mo) as the better architecture.

How many folks will find out when their deploy scripts and connectivity breaks April 1st? Private-by-default is the right security move though.

https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/default-outbound-access