Azure DDoS protection can help defend against DDoS (distributed denial of service) attacks directed at your resources. Your resources automatically receive a basic level of protection at no additional charge.

You can enable DDoS standard protection for an advanced level of protection. Create a DDoS protection plan in the subscription you wish to bill for the plan. You can then enable DDoS standard protection from any virtual network and use the DDoS protection plan to protect the resources in that virtual network.