Skip to main content
Users
CloudPortalLogin
  • Powered byPowered by
Developing with Sitecore CDP
Data privacy
Before you start sending data
Integrating with Sitecore CDP
Stream API
Batch API
REST APIs
Data lake export service
  • Sitecore CDP for developers
  • Integrating with Sitecore CDP
  • IP allowlists for inbound and outbound traffic

IP allowlists for inbound and outbound traffic

IP allowlisting enables a secure way for your organization's systems to send and receive data from Sitecore CDP. You can use this topic to access a list of Network Address Translation (NAT) gateway IP addresses to add to an allowlist for outbound and inbound traffic.

Outbound traffic IP allowlist

This section provides a list of IP addresses to add to the allowlist for each region. For each region, a table contains hosting types for Production Virtual Private Cloud (VPC) and Amazon Elastic Kubernetes Service (EKS) VPC. The Amazon S3 buckets section provides a list of AWS IP address ranges to add to the allowlist for the Batch API.

IP allowlist eu-west-1 region (Ireland)

Here are the NAT gateway IP addresses to add to the allowlist for outbound traffic from the eu-west-1 region:

VPC

NAT gateway IPs

Production VPC

  • 54.76.233.40

  • 63.34.205.183

  • 63.34.154.72

Amazon EKS VPC

  • 52.19.243.67

  • 63.34.175.47

  • 54.73.122.175

sidebar. Amazon S3 buckets
Note

IP address ranges for Amazon AWS S3 buckets might change. To keep your allowlist up to date, we recommend that you regularly check for changes, for example, by subscribing to AWS IP address ranges notifications.

For Amazon AWS S3 buckets in eu-west-1 region, you must also add the following IP addresses to the allowlist:

  • 3.5.72.0/23

  • 52.218.0.0/17

  • 3.5.64.0/21

  • 52.92.0.0/17

  • 3.251.110.208/28

  • 3.251.110.224/28

IP allowlist us-east-1 region (North Virginia)

Here are the NAT gateway IP addresses to add to the allowlist for outbound traffic from the us-east-1 region:

VPC

NAT gateway IPs

Production VPC

  • 54.144.52.232

  • 52.204.47.47

  • 54.158.164.84

Amazon EKS VPC

  • 3.223.63.217

  • 52.6.251.195

  • 34.232.58.150

sidebar. Amazon S3 buckets
Note

IP address ranges for Amazon AWS S3 buckets might change. To keep your allowlist up to date, we recommend that you regularly check for changes, for example, by subscribing to AWS IP address ranges notifications.

For Amazon AWS S3 buckets in us-east-1 region, you must also add the following IP addresses to the allowlist:

  • 18.34.0.0/19

  • 16.15.192.0/18

  • 54.231.0.0/16

  • 52.216.0.0/15

  • 18.34.232.0/21

  • 16.15.176.0/20

  • 16.182.0.0/16

  • 3.5.0.0/19

  • 44.192.134.240/28

  • 44.192.140.64/28

IP allowlist ap-southeast-2 region (Sydney)

Here are the NAT gateway IP addresses to add to the allowlist for outbound traffic from the ap-southeast-2 region:

VPC

NAT gateway IPs

Production VPC

  • 13.237.252.124

  • 13.236.58.78

  • 3.104.9.149

Amazon EKS VPC

  • 13.238.16.153

  • 52.65.233.252

  • 54.66.166.211

sidebar. Amazon S3 buckets
Note

IP address ranges for Amazon AWS S3 buckets might change. To keep your allowlist up to date, we recommend that you regularly check for changes, for example, by subscribing to AWS IP address ranges notifications.

For Amazon AWS S3 buckets in ap-southeast-2 region, you must also add the following IP addresses to the allowlist:

  • 52.95.128.0/21

  • 16.12.74.0/24

  • 3.5.164.0/22

  • 3.5.168.0/23

  • 3.26.88.0/28

  • 3.26.88.16/28

IP allowlist ap-northeast-1 region (Tokyo)

Here are the NAT gateway IP addresses to add to the allowlist for outbound traffic from the ap-northeast-1 region:

VPC

NAT gateway IPs

Production VPC

  • 18.178.222.238

  • 43.206.31.39

  • 3.115.204.107

Amazon EKS VPC

  • 54.199.12.216

  • 52.192.56.17

  • 3.114.255.168

sidebar. Amazon S3 buckets
Note

IP address ranges for Amazon AWS S3 buckets might change. To keep your allowlist up to date, we recommend that you regularly check for changes, for example, by subscribing to AWS IP address ranges notifications.

For Amazon AWS S3 buckets in ap-northeast-1 region, you must also add the following IP addresses to the allowlist:

  • 52.219.68.0/22

  • 52.219.162.0/23

  • 52.219.16.0/22

  • 52.219.195.0/24

  • 3.5.152.0/21

  • 52.219.0.0/20

  • 52.219.20.0/24

  • 52.219.136.0/22

  • 52.219.201.0/24

  • 52.219.172.0/22

  • 52.219.200.0/24

  • 52.219.152.0/22

  • 52.219.150.0/23

  • 52.219.196.0/22

  • 35.72.164.240/28

  • 35.73.115.0/28

Inbound traffic IP allowlist

You can add the specified static IP address for your organization's environment region to an allowlist to ensure a safe and static connection when receiving responses from the Sitecore CDP Batch API, REST API and other connections.

To find the environment, in Sitecore CDP, on the navigation pane, click > Company information > Environment.

Here are the inbound traffic IP addresses to add to the allowlist:

Environment

IP address

AP Region

  • 75.2.77.44

  • 99.83.132.237

EU Region

  • 52.223.29.50

  • 35.71.131.224

US Region

  • 15.197.247.61

  • 3.33.240.211

JPE Region

  • 15.197.149.20

  • 43.33.148.56

Do you have some feedback for us?

If you have suggestions for improving this article,

Privacy policySitecore Trust CenterCopyright © 1999-2025 Sitecore