Static URL of most recent Azure IP range JSON?

Michael 0 Reputation points
2025-11-15T23:08:16.3533333+00:00

I would like to automate some firewall settings on my personal server and need the Azure IP ranges.
I know https://www.microsoft.com/en-us/download/details.aspx?id=56519 exists, but the linked URL of the JSON file contains a UUID and a date, so it will get outdated. Is there any other way of getting the most up to date JSON file other than downloading the linked site meant to be consumed by humans and extracting the JSON URL? I found another website of somebody describing exactly this and it feels brittle.

It would be great if Microsoft could provide a link that redirects to the latest version, so automation becomes a lot simpler!

Azure Arc
Azure Arc
A Microsoft cloud service that enables deployment of Azure services across hybrid and multicloud environments.
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Vinodh247 40,031 Reputation points MVP Volunteer Moderator
    2025-11-16T01:34:58.14+00:00

    Hi ,

    Thanks for reaching out to Microsoft Q&A.

    There is no official static fixed URL from Microsoft that always redirects to the latest “Public Cloud IP Ranges” JSON (for example the file under ID 56519).

    However, you have two viable automation-friendly alternatives:

    Use the Service Tag Discovery API:

    GET https://management.azure.com/subscriptions/{subscriptionId}/providers/Microsoft.Network/locations/{location}/serviceTags?api-version=2025-01-01 (or appropriate version) ([Microsoft Learn](https://learn.microsoft.com/en-us/rest/api/virtualnetwork/service-tags/list Tags - List - REST API (Azure Virtual Networks)")) This gives you service-tag definitions (including address prefixes) programmatically. Caveat: It may lag behind the downloadable JSON file by up to ~4 weeks. (Stack Overflow)

    Automate parsing the Microsoft Download Center page to extract the current JSON URL:

    Fetch the page: https://www.microsoft.com/en-us/download/details.aspx?id=56519 (Microsoft)

      Parse the “click here to download” link to find the JSON file (which includes date/UUID).
    
      
         Download that JSON. This works but you admit it’s brittle (and Microsoft does not provide a simple stable alias).
    ```For reliable automated firewall updates, I suggest using the Service Tag API (option 1) where possible, and fall back to the download-link parsing (option 2) if you need *exactly* the full “Public Cloud IP Ranges” JSON each week.
    
    Please 'Upvote'(Thumbs-up) and 'Accept' as answer if the reply was helpful. This will be benefitting other community members who face the same issue.
    

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.