Hi,
You will need to open up NSG with inbound rules stating that source (Internet) to Destination (your VM) on Destination port traffic is allowed.
With that NSG rule, Internet traffic to your VM on the specified port will be allowed.
Let me know if you have any further questions.
Regards,
Karthik Srinivas