One of the reasons why I love #WindowsAzure; Access can be administered with ease; Filtering Service access across subnets within same VNET.