Domains to whitelist when using Az modules behind a FW

### Description

We are using Az module cmdlets in a Function App environment which is protected by NSG. We need to whitelist all outgoing connections. I am looking for an exhaustive list of endpoints that need to be whitelisted to be able to use the cmdlets in different Az modules.

For example, which endpoint(s) is/are needed to authenticate when using Connect-AzAccount cmdlet?
We have already allowed the following, but they seem to be insufficient, hence, I am looking for an exhaustive list.
- https://login.microsoftonline.com
- https://graph.microsoft.com
- https://graph.windows.net

### Script or Debug output

_No response_

### Environment data

_No response_

### Module versions

_No response_

### Error output

_No response_