AWS / Azure / GCP Firewall Allowlist Builder

Filter published AWS, Azure, GCP, Cloudflare, GitHub and Microsoft 365 IP ranges by provider, service and region, then copy matching CIDRs for firewall or WAF allowlists. Free, client-side snapshot.

Pick a provider and click Build.

How to use it

  1. Pick a cloud, CDN or SaaS provider. Optionally narrow by service name (for example AzureStorage, EC2, Exchange Online, GitHub actions) and region text.
  2. The page filters a static snapshot of each provider's official published ranges and shows matching CIDRs (first 200 on screen, full count reported).
  3. Copy the list into a firewall, NSG, security group or WAF allow rule. Re-check after provider publishes updates.
  4. For a fresh download of the official lists plus a ready-to-use ALLOWLIST.txt key-value export, run the Cloud IP Range Lookup actor on Apify in export mode (example: provider azure, service filter AzureStorage, region westeurope).

Checking thousands of IPs, or need live allowlists?

The Cloud IP Range Lookup actor on Apify downloads every provider list fresh on each run, checks up to 50,000 IPs (paste raw log lines) and exports filtered CIDR allowlists, for example Azure Storage in one region or GitHub webhook IPs ($2 per 1,000 IPs).

Want the full kit?

Runbooks, checklists and helpdesk templates: IT Admin Packs on Gumroad.