Public vs Private vs Internet in Azure Network Security Rules policies

[kashesha]

Hi! I'm newto terrascan and had a question about the azurepolicies for network security rule here: https://github.com/tenable/terrascan/tree/master/pkg/policies/opa/rego/azure/azurerm_network_security_rule Here, there are three rules for each port, private, public, and internet. Are all three in use at the same time? private says ensure the given port isn't exposed to private hosts, while public and internet say the given port shouldn't be exposed to any source!? And, private has low severity, public has medium and internet has high. So, wouldn't internet subsume public and public subsume private, so that essentially this port cannot be exposed to any source? Please help out! Thanks!