Azure CLI endpoints for proxy bypass

September 12, 2025 · View on GitHub

title: Endpoints used when installing the Azure CLI | Microsoft Docs description: Learn what endpoints are used when installing the Azure CLI. These URLs are sometimes added to allowlists when working behind a firewall. ms.custom: devx-track-azurecli

Azure CLI endpoints for proxy bypass

If your organization is secured with a firewall or proxy server, you must add certain IP (internet protocol) addresses and domain URLs (uniform resource locators) to the allowlist before installing the Azure CLI.

Two URLs are used during installation to download Python packages: pypi.org and files.pythonhosted.org.

The following tables provide lists of the endpoints and suffixes used by Azure CLI. These endpoints are specific to the Azure cloud where your organization is deployed. We don't recommend adding other Azure CLI-related URLs aside from the URLs needed for specific Azure CLI reference groups. However, you might want to add URLs related to other Microsoft products and services.

Endpoints

Public Cloud

Endpoint group	Endpoint
management	`https://management.core.windows.net/`
resource_manager	`https://management.azure.com/`
sql_management	`https://management.core.windows.net:8443/`
batch_resource_id	`https://batch.core.windows.net/`
gallery	`https://gallery.azure.com/`
active_directory	`https://login.microsoftonline.com/`
active_directory_resource_id	`https://management.core.windows.net/`
active_directory_graph_resource_id	`https://graph.windows.net/`
microsoft_graph_resource_id	`https://graph.microsoft.com/`
active_directory_data_lake_resource_id	`https://datalake.azure.net/`
vm_image_alias_doc	`https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/arm-compute/quickstart-templates/aliases.json`
media_resource_id	`https://rest.media.azure.net/`
ossrdbms_resource_id	`https://ossrdbms-aad.database.windows.net/`
app_insights_resource_id	`https://api.applicationinsights.io/`
log_analytics_resource_id	`https://api.loganalytics.io/`
app_insights_telemetry_channel_resource_id	`https://dc.applicationinsights.azure.com/v2/track`
synapse_analytics_resource_id	`https://dev.azuresynapse.net/`
attestation_resource_id	`https://attest.azure.net/`
portal	`https://portal.azure.com/`

Endpoint suffixes

Suffix name	Suffix
storage_endpoint	*.core.windows.net
storage_sync_endpoint	*.afs.azure.net
keyvault_dns	*.vault.azure.net
mhsm_dns	*.managedhsm.azure.net
sql_server_hostname	*.database.windows.net
mysql_server_endpoint	*.mysql.database.azure.com
postgresql_server_endpoint	*.postgres.database.azure.com
mariadb_server_endpoint	*.mariadb.database.azure.com
azure_datalake_store_file_system_endpoint	*.azuredatalakestore.net
azure_datalake_analytics_catalog_and_job_endpoint	*.azuredatalakeanalytics.net
acr_login_server_endpoint	*.azurecr.io
synapse_analytics_endpoint	*.dev.azuresynapse.net
attestation_endpoint	*.attest.azure.net

U.S. Government Cloud

Endpoint group	Endpoint
management	`https://management.core.usgovcloudapi.net/`
resource_manager	`https://management.usgovcloudapi.net/`
sql_management	`https://management.core.usgovcloudapi.net:8443/`
batch_resource_id	`https://batch.core.usgovcloudapi.net/`
gallery	`https://gallery.usgovcloudapi.net/`
active_directory	`https://login.microsoftonline.us`
active_directory_resource_id	`https://management.core.usgovcloudapi.net/`
active_directory_graph_resource_id	`https://graph.windows.net/`
microsoft_graph_resource_id	`https://graph.microsoft.us/`
vm_image_alias_doc	`https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/rm-compute/quickstart-templates/aliases.json`
media_resource_id	`https://rest.media.usgovcloudapi.net`
ossrdbms_resource_id	`https://ossrdbms-aad.database.usgovcloudapi.net`
app_insights_resource_id	`https://api.applicationinsights.us`
log_analytics_resource_id	`https://api.loganalytics.us`
app_insights_telemetry_channel_resource_id	`https://dc.applicationinsights.us/v2/track`
synapse_analytics_resource_id	`https://dev.azuresynapse.usgovcloudapi.net`
portal	`https://portal.azure.us`

Endpoint suffixes

Suffix name	Suffix
storage_endpoint	*.core.usgovcloudapi.net
storage_sync_endpoint	*.afs.azure.us
keyvault_dns	*.vault.usgovcloudapi.net
mhsm_dns	*.managedhsm.usgovcloudapi.net
sql_server_hostname	*.database.usgovcloudapi.net
mysql_server_endpoint	*.mysql.database.usgovcloudapi.net
postgresql_server_endpoint	*.postgres.database.usgovcloudapi.net
mariadb_server_endpoint	*.mariadb.database.usgovcloudapi.net
acr_login_server_endpoint	*.azurecr.us
synapse_analytics_endpoint	*.dev.azuresynapse.usgovcloudapi.net

Azure China Cloud

Endpoint group	Endpoint
management	`https://management.core.chinacloudapi.cn/`
resource_manager	`https://management.chinacloudapi.cn`
sql_management	`https://management.core.chinacloudapi.cn:8443/`
batch_resource_id	`https://batch.chinacloudapi.cn/`
gallery	`https://gallery.chinacloudapi.cn/`
active_directory	`https://login.chinacloudapi.cn`
active_directory_resource_id	`https://management.core.chinacloudapi.cn/`
active_directory_graph_resource_id	`https://graph.chinacloudapi.cn/`
microsoft_graph_resource_id	`https://microsoftgraph.chinacloudapi.cn`
vm_image_alias_doc	`https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/rm-compute/quickstart-templates/aliases.json`
media_resource_id	`https://rest.media.chinacloudapi.cn`
ossrdbms_resource_id	`https://ossrdbms-aad.database.chinacloudapi.cn`
app_insights_resource_id	`https://api.applicationinsights.azure.cn`
log_analytics_resource_id	`https://api.loganalytics.azure.cn`
app_insights_telemetry_channel_resource_id	`https://dc.applicationinsights.azure.cn/v2/rack`
synapse_analytics_resource_id	`https://dev.azuresynapse.azure.cn`
portal	`https://portal.azure.cn`

Endpoint suffixes

Suffix name	Suffix
storage_endpoint	*.core.chinacloudapi.cn
keyvault_dns	*.vault.azure.cn
mhsm_dns	*.managedhsm.azure.cn
sql_server_hostname	*.database.chinacloudapi.cn
mysql_server_endpoint	*.mysql.database.chinacloudapi.cn
postgresql_server_endpoint	*.postgres.database.chinacloudapi.cn
mariadb_server_endpoint	*.mariadb.database.chinacloudapi.cn
acr_login_server_endpoint	*.azurecr.cn
synapse_analytics_endpoint	*.dev.azuresynapse.azure.cn

Extensions

Azure CLI extensions are optional and installed separately. The extensions installation procedure includes two steps: module searching and module installation.

Azure CLI uses https://aka.ms/azure-cli-extension-index-v1 to fetch a list of extensions for module searching, whose endpoint is azcliextensionsync.blob.core.windows.net.

All extensions use endpoint azcliprod.blob.core.windows.net for module installation.

For example, if you're installing an extension, you need to add azcliextensionsync.blob.core.windows.net (for searching) and azcliprod.blob.core.windows.net (for installation) to your allowlist.

For users who rely on the dynamic extension module installation from Azure CLI recommendations must also add azurecliextensionsync.blob.core.windows.net into your allowlist for cmd indexing.