How often update Azure IP Ranges and Service Tags (ServiceTags_Public_********.json)?

Question

How often update Azure IP Ranges and Service Tags (ServiceTags_Public_********.json)?

Takeuchi, Masaki/竹内真樹 20

We would like to know how often update public IP ranges of Azure because settings of our service might be influenced.

Mounika Reddy Anumandla 6,850 Reputation points Microsoft External Staff Moderator

2025-04-03T07:03:31.0766667+00:00
Hi Takeuchi, Masaki/竹内真樹 ,

Azure public IP addresses could change as often as every week, and we have to keep up with those changes. This source of Azure public IP address ranges is a JSON file download which is available for download from Microsoft's official website.

"This file is updated weekly. New ranges appearing in the file will not be used in Azure for at least one week. Please download the new json file every week and perform the necessary changes at your site to correctly identify services running in Azure."

You can track changes using Azure Service Tags or manually compare JSON versions.

Use Azure Service Tags in NSGs Instead of manually updating IP ranges, you can use Azure Service Tags in your Network Security Groups (NSGs) to allow or deny traffic dynamically.
https://learn.microsoft.com/en-us/powershell/module/az.network/get-aznetworkservicetag?view=azps-13.4.0

Automate Updates Use Azure Automation or Azure Functions to periodically fetch and compare the JSON file. Subscribe to Azure RSS Feeds for notifications about IP range changes.
Additional resources: https://github.com/Azure/azure-powershell/issues/20139 Hope this helps! Let me know if you have any further queries! If the information is helpful, please click upvote to let us know!

Accepted answer

0 additional answers

Your answer

Mounika Reddy Anumandla 6,850 Reputation points Microsoft External Staff Moderator

2025-04-03T07:03:31.0766667+00:00

Hi Takeuchi, Masaki/竹内真樹 ,

Azure public IP addresses could change as often as every week, and we have to keep up with those changes. This source of Azure public IP address ranges is a JSON file download which is available for download from Microsoft's official website.

"This file is updated weekly. New ranges appearing in the file will not be used in Azure for at least one week. Please download the new json file every week and perform the necessary changes at your site to correctly identify services running in Azure."

You can track changes using Azure Service Tags or manually compare JSON versions.

Use Azure Service Tags in NSGs Instead of manually updating IP ranges, you can use Azure Service Tags in your Network Security Groups (NSGs) to allow or deny traffic dynamically.
https://learn.microsoft.com/en-us/powershell/module/az.network/get-aznetworkservicetag?view=azps-13.4.0

Automate Updates Use Azure Automation or Azure Functions to periodically fetch and compare the JSON file. Subscribe to Azure RSS Feeds for notifications about IP range changes.
Additional resources: https://github.com/Azure/azure-powershell/issues/20139 Hope this helps! Let me know if you have any further queries! If the information is helpful, please click upvote to let us know!

Answer 1

Arko 4,150 Microsoft External Staff Moderator

Hello Takeuchi, Masaki/竹内真樹 , Azure public IP ranges and Service Tags are updated once every week. Microsoft publishes these changes in a downloadable JSON file called ServiceTags_Public_*.json.

Official Microsoft Documentation states as below-

User's image

This means you have a minimum one-week lead time before any new IP ranges from the file are active in Azure, giving you time to adjust firewall rules, routing policies, or any other network-related settings.

Arko 4,150 Reputation points Microsoft External Staff Moderator

2025-04-04T08:39:10.4533333+00:00

Hello Takeuchi, Masaki/竹内真樹, Hope this information was helpful. Please do not forget to "Accept the answer” and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.

Share via

How often update Azure IP Ranges and Service Tags (ServiceTags_Public_********.json)?

0 additional answers

Your answer