updating service tags for storage and AKR to support regions

Author: Larry Franks

articles/machine-learning/how-to-enable-virtual-network.md

@@ -177,8 +177,8 @@ If you don't want to use the default outbound rules and you do want to limit the
 - Deny outbound internet connection by using the NSG rules.
 
 - For a __compute instance__ or a __compute cluster__, limit outbound traffic to the following items:
-   - Azure Storage, by using __Service Tag__ of __Storage__
-   - Azure Container Registry, by using __Service Tag__ of __AzureContainerRegistry__
+   - Azure Storage, by using __Service Tag__ of __Storage.RegionName__. Where `{RegionName}` is the name of an Azure region.
+   - Azure Container Registry, by using __Service Tag__ of __AzureContainerRegistry.RegionName__. Where `{RegionName}` is the name of an Azure region.
    - Azure Machine Learning, by using __Service Tag__ of __AzureMachineLearning__
 
 - For a __compute instance__, also add the follow items: