resource "azurerm_iothub" "example" {
                ...
+             public_network_access_enabled = false
              route {
                name           = "export"
                source         = "DeviceMessages"
                condition      = "true"
                endpoint_names = ["export"]
                enabled        = true
              }
                        ...
            }