mirror of
https://github.com/prowler-cloud/prowler.git
synced 2026-10-10 05:24:20 +00:00
35 lines
1.2 KiB
Plaintext
35 lines
1.2 KiB
Plaintext
---
|
|
title: 'Prowler Cloud networking and egress IP allowlist'
|
|
description: 'Prowler Cloud outbound egress IP addresses and DNS records to allowlist in firewalls and cloud security groups when scanning provider accounts.'
|
|
---
|
|
|
|
## Egress IP Addresses
|
|
|
|
Prowler Cloud makes outbound API calls to scan cloud provider accounts and connect to integrations. Allowlist these IPs in firewalls or security groups to restrict access to Prowler Cloud only.
|
|
|
|
| Region | IP Address |
|
|
|--------|------------|
|
|
| EU (Ireland) | `52.48.254.174` |
|
|
|
|
Resolve the egress IP via DNS:
|
|
|
|
```bash
|
|
dig egress.prowler.com +short
|
|
```
|
|
|
|
<Note>
|
|
The egress IP address is stable, but it is recommended to periodically verify it remains current by querying `egress.prowler.com`.
|
|
</Note>
|
|
|
|
## Use Cases
|
|
|
|
Allowlisting Prowler Cloud's egress IP address enables:
|
|
|
|
- **Credential Usage Control**: Restrict where cloud provider credentials can be used from across AWS, Azure, GCP, and other providers
|
|
- **Kubernetes Security**: Limit inbound HTTPS traffic to clusters by allowing only Prowler Cloud's IP address
|
|
- **Compliance Requirements**: Meet security policies requiring allowlisting of external services
|
|
|
|
## Contact
|
|
|
|
For questions about networking, visit the [Support page](/support).
|