A policy consisting of a collection of IP addresses that are allowed to be excluded from having other policies applied to them. An exception list is created and then applied to a resource group for it to take effect.
- When applying an exception list, you choose whether it is an "Allowed" list or a "Denied" list
- Multiple exception lists can be applied to the same resource group
- Exception lists supersede all other policies including country blocking and threat intelligence