Azure DevOps Region

Question

I am using a storage account in Azure DevOps Pipeline, I want to limit the storage account access to the Azure DevOps agents pool only

Referred this link
https://www.microsoft.com/en-us/download/details.aspx?id=56519
but when I trace the IP using below script there is a mismatch.

steps:
- script: |
    ip=$(curl -s https://ipinfo.io/ip)
    echo "IP address: $ip"

what the way the Azure DevOps Platform selects a build server pool if we use a vmImage(eg: windows) 

1.  I want to know which region it selects the build server from. (https://www.microsoft.com/en-us/download/details.aspx?id=56519).
2. Is there a way we can specify the region in the pipeline?

Answer 1

If you need to ensure private connectivity to the storage account then the most reliable way will be to stop using Microsoft build agents and self host your own. This could be with a number of different Azure services (ACI/ACA/VMSS/AKS). Crucially you will need the azure service to be using a Virtual Network, which you'll then configure the storage account to only accept incoming traffic from.