A single IP address or IP subnetwork and its associated service group.  Resources are created within a resource group in order to then apply policies to them.