Dev.to Security 🔐 Cybersecurity 👁 1

Whitelist Power Automate IP addresses for Azure Web App

Azure Web App today has blocked access from Power Automate flow with: { "statusCode": 403, "headers": { "Connection": "close", "Date": "Mon, 22 Jun 2026 06:28:40 GMT", "x-ms-forbidden-ip": "172.201.236

Azure Web App today has blocked access from Power Automate flow with:

{
  "statusCode": 403,
  "headers": {
    "Connection": "close",
    "Date": "Mon, 22 Jun 2026 06:28:40 GMT",
    "x-ms-forbidden-ip": "172.201.236.160",
    "Content-Length": "1892",
    "Content-Type": "text/html"
  }
}

The flow sends an HTTP request to a Node.js endpoint to trigger the sync process. The web app has Access Restrictions set in Networking with a rule that allows Service Tag LogicApps to access the app.

By looking up IP 172.201.236.160 on azservicetags.azurewebsites.net/iplookup I see the following:

IP address 172.201.236.160 is in range of the following Service Tags
Service Tag - AzureCloud - 172.201.0.0/16

So I add another rule to allow traffic from Service Tag AzureCloud.

And the flow is back to normal.

📰 Read the original article on Dev.to Security

Originally published by Dev.to Security. Aggregated on AIWithGhost for educational purposes — full credit and traffic to the original publisher.