IP Subnets used by Azure ATP

I appreciate the response, but can't really accept that answer.  Suggesting that we allow broader access than needed, because we are working with a cloud service doesn't make sense to me.  Most other Azure and Office 365 services provide a list of subnets, because they recognize that DNS doesn't work in firewall rules for all customers.  

Microsoft's https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/securing-domain-controllers-against-attack limiting connectivity for domain controllers.  Suggesting that we just allow all outbound https connectivity goes against that recommendation and will not work for us. What is the best way to escalate further, so we can get a list of Subnets used?