sql-2016-alwayson - Allow all NSG Rule

@JeffGoldner

This resource is added to the NSG which opens up everything.
IMO this does not set a good example, rather leave it default and state something about NSG rules in the readme?

"resources": [
{
"name": "[variables('nsgName')]",
"location": "[resourceGroup().location]",
"type": "Microsoft.Network/networkSecurityGroups",
"apiVersion": "2015-06-15",
"properties": {
"securityRules": [
{
"name": "rule1",
"properties": {
"protocol": "*",
"sourcePortRange": "*",
"destinationPortRange": "*",
"sourceAddressPrefix": "*",
"destinationAddressPrefix": "*",
"access": "Allow",
"priority": 101,
"direction": "Inbound"
}
}
]
}
},

Start by locating the sql-2016-alwayson template and inspect the Microsoft.Network/networkSecurityGroups resource shown in the issue. Determine whether the permissive inbound rule should be removed or documented as a required customization, then validate the resulting ARM template and its NSG behavior.

Written by the indexing model from the issue text.