DNS records for Azure regions used by Azure Automation

The Azure Automation service uses many DNS (Domain Name System) records for features to connect to the service. If you have an Automation account configured for a specific region, you can restrict communication to that regional datacenter. You might need to know these records to allow the following Automation features to work when it's hosted behind a firewall:

  • Hybrid Runbook Worker
  • State Configuration
  • Webhooks

Note

Linux Hybrid Runbook Worker registration will fail with the new records unless it is version 1.6.10.2 or higher. You must upgrade to a newer version of the Log Analytics agent for Linux in order for the machine to receive an updated version of the worker role and use these new records. Existing machines will continue working without any issues.

DNS records per region

The following table provides the DNS record for each region.

Note

While the list of Automation DNS records provided here have been retired, they still remain functional to allow time for you to migrate to the new records listed under support for Private Link and prevent failures with your automation processes.

Region DNS record Location Code
Australia Central ac-jobruntimedata-prod-su1.azure-automation.net
ac-agentservice-prod-1.azure-automation.net
ac
Australia East ae-jobruntimedata-prod-su1.azure-automation.net
ae-agentservice-prod-1.azure-automation.net
ae
Australia South East ase-jobruntimedata-prod-su1.azure-automation.net
ase-agentservice-prod-1.azure-automation.net
ase
Canada Central cc-jobruntimedata-prod-su1.azure-automation.net
cc-agentservice-prod-1.azure-automation.net
cc
Central India cid-jobruntimedata-prod-su1.azure-automation.net
cid-agentservice-prod-1.azure-automation.net
cid
East US 2 eus2-jobruntimedata-prod-su1.azure-automation.net
eus2-agentservice-prod-1.azure-automation.net
eus2
Japan East jpe-jobruntimedata-prod-su1.azure-automation.net
jpe-agentservice-prod-1.azure-automation.net
jpe
North Europe ne-jobruntimedata-prod-su1.azure-automation.net
ne-agentservice-prod-1.azure-automation.net
ne
South Central US scus-jobruntimedata-prod-su1.azure-automation.net
scus-agentservice-prod-1.azure-automation.net
scus
South East Asia sea-jobruntimedata-prod-su1.azure-automation.net
sea-agentservice-prod-1.azure-automation.net
sea
Switzerland North stzn-jobruntimedata-prod-su1.azure-automation.net
stzn-agentservice-prod-su1.azure-automation.net
stzn
UK South uks-jobruntimedata-prod-su1.azure-automation.net
uks-agentservice-prod-1.azure-automation.net
uks
US Gov Virginia usge-jobruntimedata-prod-su1.azure-automation.us
usge-agentservice-prod-1.azure-automation.us
usge
West Central US wcus-jobruntimedata-prod-su1.azure-automation.net
wcus-agentservice-prod-1.azure-automation.net
wcus
West Europe we-jobruntimedata-prod-su1.azure-automation.net
we-agentservice-prod-1.azure-automation.net
we
West US 2 wus2-jobruntimedata-prod-su1.azure-automation.net
wus2-agentservice-prod-1.azure-automation.net
wus2

To support Private Link in Azure Automation, the DNS records for every supported datacenter have been updated. Instead of region-specific URLs, the URLs are Automation account specific.

Region DNS record Location Code
South Africa North https://<accountId>.webhook.san.azure-automation.net
https://<accountId>.agentsvc.san.azure-automation.net
https://<accountId>.jrds.san.azure-automation.net
san
East Asia https://<accountId>.webhook.ea.azure-automation.net
https://<accountId>.agentsvc.ea.azure-automation.net
https://<accountId>.jrds.ea.azure-automation.net
ea
South East Asia https://<accountId>.webhook.sea.azure-automation.net
https://<accountId>.agentsvc.sea.azure-automation.net
https://<accountId>.jrds.sea.azure-automation.net
sea
Australia Central https://<accountId>.webhook.ac.azure-automation.net
https://<accountId>.agentsvc.ac.azure-automation.net
https://<accountId>.jrds.ac.azure-automation.net
ac
Australia Central 2 https://<accountId>.webhook.cbr2.azure-automation.net
https://<accountId>.agentsvc.cbr2.azure-automation.net
https://<accountId>.jrds.cbr2.azure-automation.net
cbr2
Australia South East https://<accountId>.webhook.ase.azure-automation.net
https://<accountId>.agentsvc.ase.azure-automation.net
https://<accountId>.jrds.ase.azure-automation.net
ase
Australia East https://<accountId>.webhook.ae.azure-automation.net
https://<accountId>.agentsvc.ae.azure-automation.net
https://<accountId>.jrds.ae.azure-automation.net
ae
Brazil South https://<accountId>.webhook.brs.azure-automation.net
https://<accountId>.agentsvc.brs.azure-automation.net
https://<accountId>.jrds.brs.azure-automation.net
brs
Brazil Southeast https://<accountId>.webhook.brse.azure-automation.net
https://<accountId>.agentsvc.brse.azure-automation.net
https://<accountId>.jrds.brse.azure-automation.net
brse
Canada Central https://<accountId>.webhook.cc.azure-automation.net
https://<accountId>.agentsvc.cc.azure-automation.net
https://<accountId>.jrds.cc.azure-automation.net
cc
China East 2 https://<accountId>.webhook.sha2.azure-automation.cn
https://<accountId>.agentsvc.sha2.azure-automation.cn
https://<accountId>.jrds.sha2.azure-automation.cn
sha2
China North https://<accountId>.webhook.bjb.azure-automation.cn
https://<accountId>.agentsvc.bjb.azure-automation.cn
https://<accountId>.jrds.bjb.azure-automation.cn
bjb
China North 2 https://<accountId>.webhook.bjs2.azure-automation.cn
https://<accountId>.agentsvc.bjs2.azure-automation.cn
https://<accountId>.jrds.bjs2.azure-automation.cn
bjs2
China North 3 https://<accountId>.webhook.cnn3.azure-automation.cn
https://<accountId>.agentsvc.cnn3.azure-automation.cn
https://<accountId>.jrds.cnn3.azure-automation.cn
cnn3
West Europe https://<accountId>.webhook.we.azure-automation.net
https://<accountId>.agentsvc.we.azure-automation.net
https://<accountId>.jrds.we.azure-automation.net
we
North Europe https://<accountId>.webhook.ne.azure-automation.net
https://<accountId>.agentsvc.ne.azure-automation.net
https://<accountId>.jrds.ne.azure-automation.net
ne
France Central https://<accountId>.webhook.fc.azure-automation.net
https://<accountId>.agentsvc.fc.azure-automation.net
https://<accountId>.jrds.fc.azure-automation.net
fc
France South https://<accountId>.webhook.mrs.azure-automation.net
https://<accountId>.agentsvc.mrs.azure-automation.net
https://<accountId>.jrds.mrs.azure-automation.net
mrs
Germany West Central https://<accountId>.webhook.dewc.azure-automation.de
https://<accountId>.agentsvc.dewc.azure-automation.de
https://<accountId>.jrds.dewc.azure-automation.de
dewc
Central India https://<accountId>.webhook.cid.azure-automation.net
https://<accountId>.agentsvc.cid.azure-automation.net
https://<accountId>.jrds.cid.azure-automation.net
cid
South India https://<accountId>.webhook.ma.azure-automation.net
https://<accountId>.agentsvc.ma.azure-automation.net
https://<accountId>.jrds.ma.azure-automation.net
ma
Japan East https://<accountId>.webhook.jpe.azure-automation.net
https://<accountId>.agentsvc.jpe.azure-automation.net
https://<accountId>.jrds.jpe.azure-automation.net
jpe
Japan West https://<accountId>.webhook.jpw.azure-automation.net
https://<accountId>.agentsvc.jpw.azure-automation.net
https://<accountId>.jrds.jpw.azure-automation.net
jpw
Korea Central https://<accountId>.webhook.kc.azure-automation.net
https://<accountId>.agentsvc.kc.azure-automation.net
https://<accountId>.jrds.kc.azure-automation.net
kc
Korea South https://<accountId>.webhook.ps.azure-automation.net
https://<accountId>.agentsvc.ps.azure-automation.net
https://<accountId>.jrds.ps.azure-automation.net
ps
Norway East https://<accountId>.webhook.noe.azure-automation.net
https://<accountId>.agentsvc.noe.azure-automation.net
https://<accountId>.jrds.noe.azure-automation.net
noe
Norway West https://<accountId>.webhook.now.azure-automation.net
https://<accountId>.agentsvc.now.azure-automation.net
https://<accountId>.jrds.now.azure-automation.net
now
Switzerland West https://<accountId>.webhook.stzw.azure-automation.net
https://<accountId>.agentsvc.stzw.azure-automation.net
https://<accountId>.jrds.stzw.azure-automation.net
stzw
UAE Central https://<accountId>.webhook.auh.azure-automation.net
https://<accountId>.agentsvc.auh.azure-automation.net
https://<accountId>.jrds.auh.azure-automation.net
auh
UAE North https://<accountId>.webhook.uaen.azure-automation.net
https://<accountId>.agentsvc.uaen.azure-automation.net
https://<accountId>.jrds.uaen.azure-automation.net
uaen
UK West https://<accountId>.webhook.cw.azure-automation.net
https://<accountId>.agentsvc.cw.azure-automation.net
https://<accountId>.jrds.cw.azure-automation.net
cw
UK South https://<accountId>.webhook.uks.azure-automation.net
https://<accountId>.agentsvc.uks.azure-automation.net
https://<accountId>.jrds.uks.azure-automation.net
uks
Central US https://<accountId>.webhook.cus.azure-automation.net
https://<accountId>.agentsvc.cus.azure-automation.net
https://<accountId>.jrds.cus.azure-automation.net
cus
East US https://<accountId>.webhook.eus.azure-automation.net
https://<accountId>.agentsvc.eus.azure-automation.net
https://<accountId>.jrds.eus.azure-automation.net
eus
East US 2 https://<accountId>.webhook.eus2.azure-automation.net
https://<accountId>.agentsvc.eus2.azure-automation.net
https://<accountId>.jrds.eus2.azure-automation.net
eus2
North Central US https://<accountId>.webhook.ncus.azure-automation.net
https://<accountId>.agentsvc.ncus.azure-automation.net
https://<accountId>.jrds.ncus.azure-automation.net
ncus
South Central US https://<accountId>.webhook.scus.azure-automation.net
https://<accountId>.agentsvc.scus.azure-automation.net
https://<accountId>.jrds.scus.azure-automation.net
scus
West Central US https://<accountId>.webhook.wcus.azure-automation.net
https://<accountId>.agentsvc.wcus.azure-automation.net
https://<accountId>.jrds.wcus.azure-automation.net
wcus
West US https://<accountId>.webhook.wus.azure-automation.net
https://<accountId>.agentsvc.wus.azure-automation.net
https://<accountId>.jrds.wus.azure-automation.net
wus
West US 2 https://<accountId>.webhook.wus2.azure-automation.net
https://<accountId>.agentsvc.wus2.azure-automation.net
https://<accountId>.jrds.wus2.azure-automation.net
wus2
West US 3 https://<accountId>.webhook.usw3.azure-automation.net
https://<accountId>.agentsvc.usw3.azure-automation.net
https://<accountId>.jrds.usw3.azure-automation.net
usw3
US Gov Virginia https://<accountId>.webhook.usge.azure-automation.us
https://<accountId>.agentsvc.usge.azure-automation.us
https://<accountId>.jrds.usge.azure-automation.us
usge
US Gov Texas https://<accountId>.webhook.ussc.azure-automation.us
https://<accountId>.agentsvc.ussc.azure-automation.us
https://<accountId>.jrds.ussc.azure-automation.us
ussc
US Gov Arizona https://<accountId>.webhook.phx.azure-automation.us
https://<accountId>.agentsvc.phx.azure-automation.us
https://<accountId>.jrds.phx.azure-automation.us
phx

Replace <accountId> in the DNS record with GUID representing your Automation Account ID from the value URL. You can get the ID required from Keys under Account Settings in the Azure portal.

Automation account primary key page

Copy the value after accounts/ from the URL field - https://<GUID>.agentsvc.<region>.azure-automation.net/accounts/<GUID>

Note

All of the Webhook and agentservice DNS records have been updated to the new style DNS records to support Private Link. For JRDS DNS records, both old and new style DNS records are supported. If you are not using Private Link, you will see the old style DNS records, while those using Private Link will see new style of DNS records.

We recommend that you use the addresses listed when defining exceptions. For a list of region IP addresses instead of region names, download the JSON file from the Microsoft Download Center for the following cloud environments:

The IP address file lists the IP address ranges that are used in the Microsoft Azure datacenters. It includes compute, SQL, and storage ranges, and reflects currently deployed ranges and any upcoming changes to the IP ranges. New ranges that appear in the file aren't used in the datacenters for at least one week.

It's a good idea to download the new IP address file every week. Then, update your site to correctly identify services running in Azure.

Note

If you're using Azure ExpressRoute, remember that the IP address file is used to update the Border Gateway Protocol (BGP) advertisement of Azure space in the first week of each month.

Next steps