Edit

Azure CLI endpoints for proxy bypass

  • Article

If your organization is secured with a firewall or proxy server, you must add certain IP (internet protocol) addresses and domain URLs (uniform resource locators) to the allowlist prior to installing the Azure CLI.

Two URLs are used during installation to download Python packages: pypi.org and files.pythonhosted.org.

The following tables provide lists of the endpoints and suffixes used by the Azure CLI. These endpoints are specific to the Azure cloud where your organization is deployed. We don't recommend adding other Azure CLI-related URLs aside from the URLs needed for specific Azure CLI reference groups, although you may want to add URLs related to other Microsoft products and services.

Endpoints

Endpoint group Endpoint
management https://management.core.windows.net/
resource_manager https://management.azure.com/
sql_management https://management.core.windows.net:8443/
batch_resource_id https://batch.core.windows.net/
gallery https://gallery.azure.com/
active_directory https://login.microsoftonline.com_
active_directory_resource_id https://management.core.windows.net/
active_directory_graph_resource_id https://graph.windows.net/
microsoft_graph_resource_id https://graph.microsoft.com/
active_directory_data_lake_resource_id https://datalake.azure.net/
vm_image_alias_doc https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/arm-compute/quickstart-templates/aliases.json_
media_resource_id https://rest.media.azure.net_
ossrdbms_resource_id https://ossrdbms-aad.database.windows.net_
app_insights_resource_id https://api.applicationinsights.io_
log_analytics_resource_id https://api.loganalytics.io_
app_insights_telemetry_channel_resource_id https://dc.applicationinsights.azure.com/v2/track_
synapse_analytics_resource_id https://dev.azuresynapse.net_
attestation_resource_id https://attest.azure.net_
portal https://portal.azure.com_

Endpoint suffixes

Suffix name Suffix
storage_endpoint *.core.windows.net
storage_sync_endpoint *.afs.azure.net
keyvault_dns *.vault.azure.net
mhsm_dns *.managedhsm.azure.net
sql_server_hostname *.database.windows.net
mysql_server_endpoint *.mysql.database.azure.com
postgresql_server_endpoint *.postgres.database.azure.com
mariadb_server_endpoint *.mariadb.database.azure.com
azure_datalake_store_file_system_endpoint *.azuredatalakestore.net
azure_datalake_analytics_catalog_and_job_endpoint *.azuredatalakeanalytics.net
acr_login_server_endpoint *.azurecr.io
synapse_analytics_endpoint *.dev.azuresynapse.net
attestation_endpoint *.attest.azure.net

Extensions

Azure CLI extensions are optional and installed separately. The Azure CLI uses https://aka.ms/azure-cli-extension-index-v1 to fetch a list of extensions. This aka.ms link points to https://github.com/Azure/azure-cli/blob/3feea02888ea67f033f407174a3a7a340158b81a/src/azure-cli-core/azure/cli/core/extension/_index.py#L11.

All extensions install with endpoint azcliprod.blob.core.windows.net with the following exceptions:

Extension name Endpoint
arcappliance arcplatformcliextprod.blob.core.windows.net
customlocation
arcdata azurearcdatacli.blob.core.windows.net
azure-batch-cli-extensions github.com\Azure
azure-devops
azure-iot
baremetal-infrastructure
csvmware
deploy-to-azure
sap-hana
azure-cli-ml azurecliext.blob.core.windows.net
azurestackhci hybridaksstorage.z13.web.core.windows.net
Hybridaks
fzf pahealyfzf.blob.core.windows.net
image-copy-extension files.pythonhosted.org
managementpartner
resource-graph
ml azuremlsdktestpypi.blob.core.windows.net
qbs qbsazcliextension.blob.core.windows.net

See also