With John on this one, you're likely missing or have incorrectly set up your ingress rule. You'll want to use something like below, though not exact.

Direction:

  • Ingress

Action:

  • Allow

Targets:

  • Specific target tags input a network tag assigned to the VM

IP Range:

  • IP range(s) you want to be able to access your app

Protocols and Ports:

  • 8080