Add public port 443 for RDP in new Azure VMs

Hi,

In the Classic Azure VM, I can add a new endpoint to map public port 443 to private port 3389 for RDP. How can I do that for the new Azure VMs? I looked into Network Security Group, but didn't find a way to do the same thing. 

Thanks!

Julie