diff --git a/builder/azure/arm/config.go b/builder/azure/arm/config.go
index bf072d5da..5ece275a7 100644
--- a/builder/azure/arm/config.go
+++ b/builder/azure/arm/config.go
@@ -346,7 +346,7 @@ type Config struct {
 	// Specify the list of IP addresses and CIDR blocks that should be
 	// allowed access to the VM. If provided, an Azure Network Security
 	// Group will be created with corresponding rules and be bound to
-	// the NIC attached to the VM.
+	// the subnet of the VM.
 	// Providing `allowed_inbound_ip_addresses` in combination with
 	// `virtual_network_name` is not allowed.
 	AllowedInboundIpAddresses []string `mapstructure:"allowed_inbound_ip_addresses"`
diff --git a/website/source/partials/builder/azure/arm/_Config-not-required.html.md b/website/source/partials/builder/azure/arm/_Config-not-required.html.md
index 5113e3db6..e70606434 100644
--- a/website/source/partials/builder/azure/arm/_Config-not-required.html.md
+++ b/website/source/partials/builder/azure/arm/_Config-not-required.html.md
@@ -220,7 +220,7 @@
 -   `allowed_inbound_ip_addresses` ([]string) - Specify the list of IP addresses and CIDR blocks that should be
     allowed access to the VM. If provided, an Azure Network Security
     Group will be created with corresponding rules and be bound to
-    the NIC attached to the VM.
+    the subnet of the VM.
     Providing `allowed_inbound_ip_addresses` in combination with
     `virtual_network_name` is not allowed.