Thank you for reaching out.
It doesn't specify any protocol or port ranges on the required IPs that need to be added. Can anyone clarify for me if they have to be any/any or we can limit them to say TCP and a range of ports?
You can set the protocol and port range as per the connector you have utilized in you Azure Logic App. Most connectors work on top of HTTPS protocol and use HTTPS port 443 as the default. However, some connectors might use other port numbers and protocols, such as HTTP, FTP, or SMTP.
Following is the recommendations to configure firewall inbound rules:
- For the destination (local) port, allow the appropriate port for the network protocol.
- For the source (remote) port, allow ANY/ALL.
This information is currently documented here
You can go through Azure Logic Apps - Firewall IP configuration considerations to determine the changes you need to apply based on the notification above.
Hope this helps! Please let me know if you have any additional questions. Thank you!