Microsoft Azure uses 717 prefixes for AzureKeyVault.
Short answer
AzureKeyVault covers Azure Key Vault endpoints.
Prefixes
What changed
No prefixes added or removed since we started tracking this list. Changes appear here the day after the provider publishes them.
Allowlist formats
nginx (first 5 prefixes)
allow 102.133.124.140/30; allow 102.133.154.0/30; allow 102.133.251.220/30; allow 102.133.26.0/30; allow 102.37.160.176/29; deny all;
iptables (first 5 prefixes)
iptables -A INPUT -s 102.133.124.140/30 -j ACCEPT iptables -A INPUT -s 102.133.154.0/30 -j ACCEPT iptables -A INPUT -s 102.133.251.220/30 -j ACCEPT iptables -A INPUT -s 102.133.26.0/30 -j ACCEPT iptables -A INPUT -s 102.37.160.176/29 -j ACCEPT
Generate the full list from the CSV, and refresh it on a schedule: providers add and retire prefixes often.
Sources
- Microsoft Azure: published IP ranges · checked 5 Nov 2026
- Microsoft Azure documentation