Forum Discussion

Sergi's avatar
Sergi
Copper Contributor
Mar 04, 2025

AMPLS Restrictions Preventing Outbound API Calls in Logic Apps – Any Workarounds?

Hi everyone,

I’m encountering an issue where Azure Monitor Private Link Scope (AMPLS) restrictions are preventing Azure Logic Apps from making any outbound API calls, even to Microsoft-owned outbound IP addresses.

One specific problem is that when running KQL queries inside a Logic App, the Azure Monitor connector fails because it attempts to access Microsoft outbound IPs, which are blocked by AMPLS restrictions.

Since this is happening within Logic Apps itself, I don’t have direct control over these outbound calls. Has anyone found a workaround to allow Logic Apps to function correctly while keeping AMPLS in place?

Would Private Endpoints, VNET Integration, or any other configuration help resolve this?

Any insights or solutions would be greatly appreciated!

playbooks
siem
soar
  • Sergi's avatar
    Sergi
    Copper Contributor
    Mar 07, 2025

    Thanks for the feedback. That is one of the options we are going to try. KR

    • luchete's avatar
      luchete
      Steel Contributor
      Mar 08, 2025

      Hi Sergi,

      No problem. If the answer was helpful to you, please consider to mark it as Solved/closed.

      Thanks!

  • luchete's avatar
    luchete
    Steel Contributor
    Mar 06, 2025

    Hello Sergi,

    One option is to use a private endpoint for Azure Monitor to allow Logic Apps to communicate without being blocked by AMPLS. You could also try deploying Logic Apps in an integrated VNET to control outbound traffic more effectively. If the issue persists, consider using an on-premises data gateway as a bridge. Checking Microsoft’s documented IP ranges and allowing specific ones in your setup might also help.

    Regards!

Resources