Is it possible to restrict access to my virtual machine (with a firewall)?

Yes, every service has a pre-configured firewall that allows access to the internet through ports specific to certain applications. From the service dashboard, you can easily restrict access to a single or a range of IPs.