rules/conditions/azure/nsg/nsg-allow-tcp.json

{
    "filter": [
        {
            "conditions": [
                ["properties.protocol", "eq", "*"],
                ["properties.protocol", "eq", "TCP"]
            ],
            "operator":"or"
        }
    ]
}