Advanced Clusters

Back Next

Step 6. Allow domains in AWS

When the Secure Agent creates an

advanced cluster

in an AWS environment, the cluster nodes need access to certain domains to fetch artifacts, such as machine images, and to access sources and targets.

Add the following domains to the outbound allowlists for your security groups:

.s3.amazonaws.com
.s3.<staging bucket region>.amazonaws.com
awscli.amazonaws.com
artifacthub.informaticacloud.com

If you use one of the EMEA PODs, also allow this domain:

artifacthubemea.informaticacloud.com

EMEA PODs include EM West1, EM Central1 Azure, UK, EM SouthEast 1 Azure, ME Central 2 GCP, EM West 2 GCP.

You need to install AWS CLI as part of the cluster creation.

If you use an Amazon S3 or Amazon Redshift object as a source or target, allow inbound traffic to each source and target bucket that the agent will access.

If you use GPU-enabled worker instances, also allow the following domains:

.docker.com
.docker.io
.nvidia.com
.nvidia.github.io

Also allow the appropriate region for AWS:

sts.amazonaws.com

To enable a regional endpoint connection, contact Informatica Global Customer Support to get the required custom property setting.

If your organization does not use an outgoing proxy server, contact Informatica Global Customer Support to disable the proxy settings used for S3 access.

Rename Saved Search

Table of Contents

Advanced Clusters

Advanced Clusters

Step 6. Allow domains in AWS

Step 6. Allow domains in AWS