AzureVM/inst/tpl/nsg_default.json

{
    "apiVersion": "2018-11-01",
    "type": "Microsoft.Network/networkSecurityGroups",
    "name": "[variables('nsgName')]",
    "location": "[variables('location')]",
    "properties": {}
}