Azure Blob Storage whitelist for DevOps

Singh, Gaurav 5 Reputation points
2023-05-23T18:11:18.76+00:00

Hi Team,

We want to limit the blob storage access to Azure DevOps Microsoft hosted Build Agents,

I was trying to retrieve the IP Address listed on the
https://www.microsoft.com/en-us/download/confirmation.aspx?id=56519 here is incorrect

My organization is configured in CentralUS but the IP assigned to the build servers are from a different region

"104.45.192.0/20" 

Subnet is from       

"name": "AzureCloud.eastus",
"id": "AzureCloud.eastus", 

Azure Blob Storage
Azure Blob Storage
An Azure service that stores unstructured data in the cloud as blobs.
2,975 questions
{count} votes

1 answer

Sort by: Most helpful
  1. AirGordon 7,125 Reputation points
    2023-05-23T18:55:45.1866667+00:00

    The IP ranges used are from a large range and can change regularly.

    If you need IP secured access from the agent to a storage account then the recommended approach is to deploy an Azure Virtual Network, enable the storage account to be accessed by that Virtual Network and then deploy self hosted agents into the network. https://learn.microsoft.com/en-us/azure/devops/pipelines/agents/agents?view=azure-devops&tabs=browser#install

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.