M365 Changelog: Attention required - New Power Platform URLs used by Power Apps and Power Platform admin center

MC454715 – Microsoft Power Platform will begin relying on a new cloud service dependency called Power Platform API. This is updated in our documentation available at Power Platform URLs and IP address ranges. The Power Apps End-user and Maker experiences, as well as Power Platform admin center experiences, will leverage this new API internally, as will more Power Platform experiences over time.

How does this affect me?
This change concerns customers with an in-house firewall rule to restrict network traffic to various URLs or IP addresses. You will want to adjust them to allow this new traffic to flow, otherwise you will experience service interruptions. The new URLs are available here.

In addition, this impacts customers who have employed Azure Active Directory Conditional Access policies targeting the cloud service “Microsoft PowerApps” or “Microsoft Power Platform API”. As client experiences (e.g. https://apps.powerapps.com, https://make.powerapps.com or Power Apps mobile clients) adopt ‘Power Platform API’, Conditional Access policies targeting ‘Microsoft PowerApps’ will no longer result in the same Conditional Access enforcement.

In commercial cloud, these are the cloud services being referenced and their corresponding application ids:

1. ‘Microsoft PowerApps’ application id: 475226c6-020e-4fb2-8a90-7a972cbfc1d4
2. ‘Power Platform API’ application id: 8578e004-a5c6-46e7-913e-12f58912df43

Please note, the cloud service dependency change is occurring in all clouds.

Action needed:
Evaluate adding the cloud service ‘Power Platform API’ to your Conditional Access policies, and updated URLs to your firewall rules. This cloud service is now available in Azure portal Conditional Access experiences to add and remove it from policies.

Please contact Microsoft Support if you need further assistance.