Как создать несколько групп безопасности сети для разных правил безопасности

Question

Как создать несколько NSG для нескольких правил?Например, каждый NSG имеет разные правила безопасности.Поэтому для этого нужно написать шаблон ARM.

Создан объектный параметр.Но не знаю, как это сделать.

securityRules":             {"value": 
        {
        "DFS":
           [

            {"name": "VPN",
                "description": "VPN","priority": "200","protocol": "*","sourceAddressPrefix": "172.16.4.0/24","sourcePortRange": "*","destinationAddressPrefix": "*","destinationPortRange": "*","access": "Allow","direction": "Inbound"
                    },

                     {"name": "MNG",

                    "description": "MNG","priority": "210","protocol": "*","sourceAddressPrefix": "10.96.254.0/24","sourcePortRange": "*","destinationAddressPrefix": "*","destinationPortRange": "*","access": "Allow","direction": "Inbound"
                    },

                    {"name": "AG",

                          "description": "AG","priority": "220","protocol": "*","sourceAddressPrefix": "10.95.0.0/22","sourcePortRange": "*","destinationAddressPrefix": "*","destinationPortRange": "*","access": "Allow","direction": "Inbound"
                  }

            ],

            "NAV":

            [

                {"name": "VPN-1",
                    "description": "VPN","priority": "200","protocol": "*","sourceAddressPrefix": "172.16.5.0/24","sourcePortRange": "*","destinationAddressPrefix": "*","destinationPortRange": "*","access": "Allow","direction": "Inbound"
                        },

                         {"name": "MNG-1",

                        "description": "MNG","priority": "210","protocol": "*","sourceAddressPrefix": "10.97.254.0/24","sourcePortRange": "*","destinationAddressPrefix": "*","destinationPortRange": "*","access": "Allow","direction": "Inbound"
                        },

                        {"name": "AG-1",

                              "description": "AG","priority": "220","protocol": "*","sourceAddressPrefix": "10.96.0.0/22","sourcePortRange": "*","destinationAddressPrefix": "*","destinationPortRange": "*","access": "Allow","direction": "Inbound"
                      }


            ]


        }