diff --git a/policies/oceanbox/network/allow-azure-egress.yaml b/policies/oceanbox/network/allow-azure-egress.yaml
new file mode 100644
index 00000000..0a473210
--- /dev/null
+++ b/policies/oceanbox/network/allow-azure-egress.yaml
@@ -0,0 +1,15 @@
+apiVersion: cilium.io/v2
+kind: CiliumClusterwideNetworkPolicy
+metadata:
+  name: allow-azure-egress
+spec:
+  egress:
+  - toFQDNs:
+    - matchName: atlantis.blob.core.windows.net
+    - matchName: atlantisvault.vault.azure.net
+    toPorts:
+    - ports:
+      - port: "443"
+        protocol: TCP
+  endpointSelector: {}
+