Azure VM with only private ip that can surf internet?
Solution 1:
To quote from the documentation,
All resources in a VNet can communicate outbound to the internet, by default.
If you don't want internet access, you need to adjust your security policies.