You have an Azure subscription that contains the following resources: VNET1 (Virtual Network) Subnet1: Subnet in VNET1 WebApp1: Web Application Service NSG1 (Network Security Group) You create an application security group, ASG1. Which resource can use ASG1?