To launch the Director virtual machines securely in Microsoft Azure, we recommend you:
Launch the Director virtual machines in the private subnet of the virtual network.
Use managed disks to launch all Director virtual machines to ensure that all the disks are encrypted.
Open only the required ports in the network security groups.