As per https://zcusa.951200.xyz/en-us/azure/virtual-network/service-tags-overview , you should be able to use the AzureArcInfrastructure service tag
If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.
hth
Marcin