Limiting IPs during Azure Migrate

I am preparing to use Azure Migrate and as noted in the prerequisites, I need to "allow inbound connections on WinRM port 5985 (HTTP) for discovery of Windows servers".

Can this opening be limited to a particular IP address or subnet?

I can open the port, but I would like to limit it to the intended Azure traffic.