Azure IPAM
azure.github.io
What it is
Azure IPAM helps Azure customers plan, deploy, manage, and monitor IP address space. It discovers networks, subnets, and endpoints across an Azure tenant, and can highlight orphaned endpoints and virtual network peers with misconfigurations. Users can group networks into Spaces and Blocks, monitor IP and CIDR consumption, and map external networks to Azure CIDR ranges. Planning tools show how many subnets of a chosen mask fit in a CIDR block. A REST API supports address-management automation for infrastructure-as-code and CI/CD workflows, with documented reservation paths through ARM and Bicep templates, Terraform, and CI/CD pipelines. The application runs as a container in Azure App Service or Azure Functions, or can be deployed API-only. Supporting infrastructure runs in the customer's Azure tenant, except for the public container registry. The open-source project is free; Azure infrastructure and hosting costs are separate. Deployment needs an Azure subscription and substantial tenant permissions.
Spec sheet
- Purpose
- Azure IPAM helps Azure customers plan, deploy, manage, and monitor their IP address space.Read 4 Oct 2026 · github.com
- Deployment
- The application can run as a container in Azure App Service or Azure Functions, and can be deployed API-only without a UI.Read 4 Oct 2026 · github.com
- Integrations
- The documentation names ARM and Bicep templates, Terraform, and CI/CD pipelines as integration paths for reserving CIDR blocks.Read 4 Oct 2026 · github.com
- Support
- Project support is limited to the listed documentation and GitHub issue resources; users can file bugs and feature requests as GitHub Issues.Read 4 Oct 2026 · github.com
- Automation
- A REST API supports programmatic IP address management for infrastructure-as-code and CI/CD workflows.Read 4 Oct 2026 · github.com
- Backend
- The Python backend uses FastAPI and Azure Resource Graph to gather information about Azure networking resources and their states.Read 4 Oct 2026 · github.com
- Data and tenancy
- Supporting infrastructure runs in the customer's Azure tenant, and the documentation says resources are not shared with other IPAM users except for the public container registry.Read 4 Oct 2026 · github.com
- Discovery
- It can discover networks, subnets, and endpoints across an Azure tenant and visualize orphaned endpoints and misconfigured virtual network peers.Read 4 Oct 2026 · github.com
- Identity and secrets
- The architecture uses Azure app registrations for authentication and Azure Key Vault to store app registration credentials, managed identity ID, and tenant ID.Read 4 Oct 2026 · github.com
- Organization
- Users can group Azure networks into Spaces and Blocks, track IP and CIDR consumption, and map external networks to Azure CIDR ranges.Read 4 Oct 2026 · github.com
- Permissions
- Deployment prerequisites include an Azure subscription, subscription-level Owner access, permissions at the Root Management Group, and Global Administrator consent for app registration API permissions.Read 4 Oct 2026 · github.com
- Planning
- Planning tools support exploring how many subnets of a given mask are available within a CIDR block.Read 4 Oct 2026 · github.com
- Security reporting
- The security policy directs vulnerability reports to the Microsoft Security Response Center and asks users not to report them through public GitHub issues.Read 4 Oct 2026 · github.com
- Tenant limit
- The project README says the tool is designed with a single tenant in mind and lists multi-tenant support as under assessment.Read 4 Oct 2026 · github.com
Plans and prices
Azure IPAM Free Open-source project · Azure infrastructure and hosting costs are separate Read 4 Oct 2026 · github.com
Strong points and limits
Strong points
- Discovers tenant networks, subnets, and endpoints
- Tracks IP and CIDR consumption in Spaces and Blocks
- REST API supports programmatic address management
- Can run API-only without a user interface
Limits
- Designed with a single tenant in mind
- Deployment requires subscription-level Owner access
- Requires Root Management Group permissions
- Azure infrastructure and hosting costs are separate
Who it suits
Azure IPAM suits Azure customers managing address space across networks and subnets. It is particularly relevant to teams using infrastructure-as-code or CI/CD workflows for IP address management.
Verdict
Azure IPAM combines network discovery, address planning, and API-driven management for Azure environments. Account for its tenant-wide permission prerequisites and separate infrastructure costs before deployment.
Where Specifiction places it
- IP Address Management Software#8 of 438.3
