Azure CLI endpoints for proxy bypass
If your organization is secured with a firewall or proxy server, you must add certain IP (internet protocol) addresses and domain URLs (uniform resource locators) to the allowlist prior to installing the Azure CLI.
Two URLs are used during installation to download Python packages: pypi.org and files.pythonhosted.org.
The following tables provide lists of the endpoints and suffixes used by the Azure CLI. These endpoints are specific to the Azure cloud where your organization is deployed. We don't recommend adding other Azure CLI-related URLs aside from the URLs needed for specific Azure CLI reference groups, although you may want to add URLs related to other Microsoft products and services.
Endpoints
| Endpoint group | Endpoint |
|---|---|
| management | https://management.core.windows.net/ |
| resource_manager | https://management.azure.com/ |
| sql_management | https://management.core.windows.net:8443/ |
| batch_resource_id | https://batch.core.windows.net/ |
| gallery | https://gallery.azure.com/ |
| active_directory | https://login.microsoftonline.com_ |
| active_directory_resource_id | https://management.core.windows.net/ |
| active_directory_graph_resource_id | https://graph.windows.net/ |
| microsoft_graph_resource_id | https://graph.microsoft.com/ |
| active_directory_data_lake_resource_id | https://datalake.azure.net/ |
| vm_image_alias_doc | https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/arm-compute/quickstart-templates/aliases.json_ |
| media_resource_id | https://rest.media.azure.net_ |
| ossrdbms_resource_id | https://ossrdbms-aad.database.windows.net_ |
| app_insights_resource_id | https://api.applicationinsights.io_ |
| log_analytics_resource_id | https://api.loganalytics.io_ |
| app_insights_telemetry_channel_resource_id | https://dc.applicationinsights.azure.com/v2/track_ |
| synapse_analytics_resource_id | https://dev.azuresynapse.net_ |
| attestation_resource_id | https://attest.azure.net_ |
| portal | https://portal.azure.com_ |
Endpoint suffixes
| Suffix name | Suffix |
|---|---|
| storage_endpoint | *.core.windows.net |
| storage_sync_endpoint | *.afs.azure.net |
| keyvault_dns | *.vault.azure.net |
| mhsm_dns | *.managedhsm.azure.net |
| sql_server_hostname | *.database.windows.net |
| mysql_server_endpoint | *.mysql.database.azure.com |
| postgresql_server_endpoint | *.postgres.database.azure.com |
| mariadb_server_endpoint | *.mariadb.database.azure.com |
| azure_datalake_store_file_system_endpoint | *.azuredatalakestore.net |
| azure_datalake_analytics_catalog_and_job_endpoint | *.azuredatalakeanalytics.net |
| acr_login_server_endpoint | *.azurecr.io |
| synapse_analytics_endpoint | *.dev.azuresynapse.net |
| attestation_endpoint | *.attest.azure.net |
Extensions
Azure CLI extensions are optional and installed separately. The Azure CLI uses https://aka.ms/azure-cli-extension-index-v1 to fetch a list of extensions. This aka.ms link points to https://github.com/Azure/azure-cli/blob/3feea02888ea67f033f407174a3a7a340158b81a/src/azure-cli-core/azure/cli/core/extension/_index.py#L11.
All extensions install with endpoint azcliprod.blob.core.windows.net and azurecliextensionsync.blob.core.windows.net with the following exceptions:
| Extension name | Endpoint |
|---|---|
| arcappliance | arcplatformcliextprod.blob.core.windows.net |
| customlocation | |
| arcdata | azurearcdatacli.blob.core.windows.net |
| azure-batch-cli-extensions | github.com\Azure |
| azure-devops | |
| azure-iot | |
| baremetal-infrastructure | |
| csvmware | |
| deploy-to-azure | |
| sap-hana | |
| azure-cli-ml | azurecliext.blob.core.windows.net |
| azurestackhci | hybridaksstorage.z13.web.core.windows.net |
| Hybridaks | |
| fzf | pahealyfzf.blob.core.windows.net |
| image-copy-extension | files.pythonhosted.org |
| managementpartner | |
| resource-graph | |
| ml | azuremlsdktestpypi.blob.core.windows.net |
| qbs | qbsazcliextension.blob.core.windows.net |
