Locking down internet access from SCOM servers

I haven’t hit this for some time but a client is asking me to provide the urls that SCOM needs to access so they can lock it down on the proxy server. Currently I am using procmon to investigate this but does anyone know of a page of urls? Ideally MS would publish this like the Office 365 url access

I would try it with the IP address ranges from Azure Datacenters:



CRL-checking would be needed for example.