@Amit Prakash dutta Thank you for reaching out to Microsoft Q&A.
I understand that want more clarity regarding the IP address range that the service tags include.
Regarding AzureCloud servicetag, it includes ALL public IP addresses from Azure. I do not think it can be used for windows updates as that may be going to IPs outside of Azure. You can always refer to this page for the Azure IP Ranges and Service Tage-Public Cloud.
Regarding Internet Service Tag, if applied, it will override the 0.0.0.0/0 if traffic is going to the Public Internet. Hope this helps.
Please let us know if you have any further questions/concerns. Thank you!
Remember:
Please accept an answer if correct. Original posters help the community find answers faster by identifying the correct answer. Here is how.
Want a reminder to come back and check responses? Here is how to subscribe to a notification.