Note that *.services.ai.azure.com isn't in the allowed endpoints list - #10371
Note that *.services.ai.azure.com isn't in the allowed endpoints list#10371BenjisCollector wants to merge 1 commit into
Conversation
|
@BenjisCollector : Thanks for your contribution! The author(s) and reviewer(s) have been notified to review your proposed change. |
|
@BenjisCollector : Thanks for your contribution! The author(s) and reviewer(s) have been notified to review your proposed change. |
|
Learn Build status updates of commit a58eb62: ✅ Validation status: passed
For more details, please refer to the build report. |
|
Can you review the proposed changes? Important: When the changes are ready for publication, adding a #label:"aq-pr-triaged" |
prmerger-automator
Bot
added
the
aq-pr-triaged
There was a problem hiding this comment.
Pull request overview
This PR updates the sp_invoke_external_rest_endpoint documentation to help readers avoid using an Azure AI Foundry endpoint hostname (*.services.ai.azure.com) that isn’t covered by the allowed endpoints list for outbound calls.
Changes:
- Adds a NOTE clarifying that
services.ai.azure.comhostnames shown in the Azure AI Foundry portal aren’t currently in the allowed endpoints list. - Directs readers to use the corresponding
*.cognitiveservices.azure.comendpoint for successful credential/URL usage.
| | Azure AI Translator | `api.cognitive.microsofttranslator.com` | | ||
|
|
||
| > [!NOTE] | ||
| > Azure AI Foundry resources also expose a `*.services.ai.azure.com` endpoint. That domain isn't in the allowed list. Use the `*.cognitiveservices.azure.com` endpoint of the same resource for both the database scoped credential name and the request URL. |
Summary
*.services.ai.azure.comisn't in the allowed endpoints list on this page, but it's the endpoint hostname Azure AI Foundry surfaces by default for an AI Services resource. The same resource is also reachable at*.cognitiveservices.azure.com, which is on the list.This adds a short note under the table pointing readers at the allowed hostname.
Context
An AI Foundry resource (
kind: AIServices) reportshttps://<name>.cognitiveservices.azure.com/asproperties.endpoint, while the Foundry portal presents theservices.ai.azure.comhostname. Readers who copy the hostname they see in the portal into a database scoped credential land on a domain this list doesn't cover, and the resulting error names the credential rather than the domain restriction, so the cause isn't obvious from the message.