---
title: Service Endpoint Policy
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: Docs > DDSQL Reference > Data Directory > Service Endpoint Policy
---

# Service Endpoint Policy

An Azure Service Endpoint Policy lets you control which Azure service resources can be accessed through virtual network service endpoints. It adds an extra layer of network security by defining allow lists for specific service resources, such as storage accounts or SQL databases. This ensures that only approved services are reachable from selected subnets.

```
azure.network_service_endpoint_policy
```

## Fields

| Title                                | ID   | Type          | Data Type                                                                               | Description |
| ------------------------------------ | ---- | ------------- | --------------------------------------------------------------------------------------- | ----------- |
| _key                                 | core | string        |
| contextual_service_endpoint_policies | core | array<string> | A collection of contextual service endpoint policy.                                     |
| etag                                 | core | string        | A unique read-only string that changes whenever the resource is updated.                |
| id                                   | core | string        | Resource ID.                                                                            |
| kind                                 | core | string        | Kind of service endpoint policy. This is metadata used for the Azure portal experience. |
| location                             | core | string        | Resource location.                                                                      |
| name                                 | core | string        | Resource name.                                                                          |
| provisioning_state                   | core | string        | The current provisioning state.                                                         |
| resource_group                       | core | string        |
| resource_guid                        | core | string        | The resource GUID property of the service endpoint policy resource.                     |
| service_alias                        | core | string        | The alias indicating if the policy belongs to a service                                 |
| service_endpoint_policy_definitions  | core | json          | A collection of service endpoint policy definitions of the service endpoint policy.     |
| subnets                              | core | json          | A collection of references to subnets.                                                  |
| subscription_id                      | core | string        |
| subscription_name                    | core | string        |
| tags                                 | core | hstore_csv    |
| type                                 | core | string        | Resource type.                                                                          |