As您提到的，您将要使用Azure网络安全组来做到这一点.

As you mentioned, you will want to do this using Azure Network Security Groups. 

您可以添加一个范围的IP地址以允许VM使用，然后拒绝所有其他IP.

You can add a range of IP address to allow to the VM and then deny all other IPs. 

诀窍是找到印度的所有IP范围.

The trick will be finding all the IP ranges from India. 

您可以在网上查找此信息，但这可能并不总是准确的，这可能意味着您要访问您的VM的某些人将无法访问.

You can look this up online but it might not always be accurate which may mean some people you want to access your VM will not be able to. 

如果您要允许访问虚拟机的特定人群，也可以将他们的特定IP地址添加到允许规则中

If you have a specific set of people you want to allow access to the VM you can also just add their specific IP address to the allow rule instead

https://docs.microsoft.com/en-us/azure/virtual -network/security-overview