Merge pull request #8216 from MicrosoftDocs/main

Auto Publish – main to live - 2025-08-12 22:30 UTC

Author: learn-build-service-prod[bot]

docs/managed-devops-pools/configure-security.md

@@ -1,7 +1,7 @@
 ---
 title: Configure security
 description: Learn how to configure security settings for Managed DevOps Pools.
-ms.date: 07/29/2025
+ms.date: 08/12/2025
 ms.custom: sfi-image-nochange
 ---
 
@@ -611,6 +611,23 @@ To use this feature, you must:
 
 - The principal configuring the Key Vault integration settings (if you are configuring the Key Vault settings, then your account) must have the **Key Vault Certificate User** role assignment on the Key Vault where the certificates are stored.
 
+- **Coming soon** - If you are enforcing network isolation for your Azure Key Vault to only permit authorized resources access, you must add the following IP addressess to your [Azure Key Vault allowlist](/azure/key-vault/general/network-security#key-vault-firewall-enabled-ipv4-addresses-and-ranges---static-ips). The following IP address ranges and any new IP address ranges will be added to an upcoming [Azure service tag](/azure/virtual-network/service-tags-overview) named **DevOpsInfrastructure**.
+
+    | Location            | IP address range        |
+    |---------------------|-------------------------|
+    | australiaeast       | 4.198.194.192/28        |
+    | brazilsouth         | 74.163.143.32/28        |
+    | canadacentral       | 130.107.66.0/28         |
+    | centralindia        | 98.70.255.112/28        |
+    | centralus           | 72.152.33.16/28         |
+    | eastus2             | 72.153.21.192/28        |
+    | germanywestcentral  | 131.189.121.128/28      |
+    | northeurope         | 72.145.24.48/28         |
+    | southeastasia       | 135.171.33.48/28        |
+    | switzerlandnorth    | 74.161.82.192/28        |
+    | uksouth             | 131.145.107.64/28       |
+    | westcentralus       | 128.24.189.20           |
+
 > [!NOTE]
 > As of `api-version 2025-01-21`, if you use this feature you can only use a single identity on the pool. Support for multiple identities will be added soon.
 >