Azure Blob Storage whitelist for DevOps

Singh, Gaurav 5

Hi Team,

We want to limit the blob storage access to Azure DevOps Microsoft hosted Build Agents,

I was trying to retrieve the IP Address listed on the
https://www.microsoft.com/en-us/download/confirmation.aspx?id=56519 here is incorrect

My organization is configured in CentralUS but the IP assigned to the build servers are from a different region

"104.45.192.0/20"

Subnet is from

"name": "AzureCloud.eastus",
"id": "AzureCloud.eastus",

Sumarigo-MSFT 47,201 Reputation points Microsoft Employee

2023-05-24T03:02:36.96+00:00

@Singh, Gaurav Just checking in to see if the above answer helped. If this answers your query, do click "Accept the answer” for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.
Sumarigo-MSFT 47,201 Reputation points Microsoft Employee

2023-05-30T15:14:54.77+00:00

@Singh, Gaurav Just checking in to see if the above answer helped. If this answers your query, do click "Accept the answer” for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

1 answer

AirGordon 7,125 Reputation points

2023-05-23T18:55:45.1866667+00:00

The IP ranges used are from a large range and can change regularly.

If you need IP secured access from the agent to a storage account then the recommended approach is to deploy an Azure Virtual Network, enable the storage account to be accessed by that Virtual Network and then deploy self hosted agents into the network. https://learn.microsoft.com/en-us/azure/devops/pipelines/agents/agents?view=azure-devops&tabs=browser#install
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Your answer