Generally available: Service Tag Discovery API

The Service Tag Discovery API is now generally available. You can call the API for a list of over 60 Service Tags and their corresponding IP ranges to configure on-premises firewalls and Azure resources.

• You can use the API to replace downloading and parsing the weekly JSON files with Service Tag data we provide. In the past, users have had to deal with changing file names each week. Now there is a consistent way to programmatically retrieve this data.
• It’s easy to filter results for specific Service Tags or regions for services you use:
  • For example, get the list of ranges associated with Azure Storage in the West US 2 region by running:​​​​​​

PS C:\> $serviceTags = Get-AzNetworkServiceTag -Location eastus2

PS C:\> $serviceTags.Values | Where-Object { $_.Name -eq "Storage.WestUS2" }

Note that the -Location parameter dictates which region you are retrieving the data from, not which regional Service Tags are returned. 

• Stay up to date with changing service endpoints. The API regularly updates with new IPs before they are put into use by Azure services, so you can keep your configurations current and filter traffic correctly. There are currently more than 80,000 prefixes associated with Service Tags and new services and ranges are added frequently - using the API is an easy way to stay up to date and access this data efficiently.

The feature is available through REST, PowerShell, and CLI.

Learn more.