title: Limit deployment rights to Azure from Azure DevOps
body: <p>I want to lock down access to the kudu tools e.g. https://.scm.azurewebsites.net/DebugConsole to a set of ip addresses that azure devops uses. 
  I have gone into AzureDevops -> Organisation settings -> Overview and see that my organisation's Azure Devops is held in e.g. West Europe
  I have downloaded the list of ip addresses of azure data centers from here: <a href="https://www.microsoft.com/en-nz/download/details.aspx?id=41653" rel="nofollow noreferrer">https://www.microsoft.com/en-nz/download/details.aspx?id=41653</a> </p>
  
  <p>I have gone onto App Service -> Networking blade -> Configure Access restrictions and uploaded the list of ip addresses of e.g. West Europe for .scm.azurewebsites.net.</p>
  
  <p>My understanding is that AzureDevops agents operate from the region specified in organisation settings so if I put in those IP addresses they should be able to acccess the kudu tools fine but instead I get the following error:</p>
  
  <pre><code>Failed to deploy web package to App Service.
  Error Code: ERROR_COULD_NOT_CONNECT_TO_REMOTESVC
  More Information: Could not connect to the remote computer ("&lt;myappservice&gt;.scm.azurewebsites.net") using the specified process ("Web Management Service") because the server did not respond. Make sure that the process ("Web Management Service") is started on the remote computer.  Learn more at: http://go.microsoft.com/fwlink/?LinkId=221672#ERROR_COULD_NOT_CONNECT_TO_REMOTESVC.
  Error: The remote server returned an error: (403) Forbidden.
  </code></pre>
  
  <p>If I remove the ip addresses it deploys with no problems. How do I limit deployment access to Azure Devops</p>