Configuring firewall and proxy access for AWS

If you run Turbonomic behind a proxy or firewall, configure Turbonomic to allow unrestricted access to the following URLs to enable the full set of features for AWS targets.

Note:

If your firewall performs IP based routing, be aware that Amazon reserves the right to change the DNS names on these endpoints over time. Also note, the AWS SDK is designed to use dynamic endpoints. It is possible that Amazon will change the endpoints the SDK depends on over time. As a result, the names of endpoints you must access might be different than the names listed here.

  • Autoscaling

    autoscaling.{region-id}.amazonaws.com

  • AWS Bill

    {bucket-name}.s3.{region-containing-report}.amazonaws.com

  • CloudWatch

    monitoring.{region-id}.amazonaws.com

  • CloudWatch Events

    events.{region-id}.amazonaws.com

  • CloudWatch Logs

    logs.{region-id}.amazonaws.com

  • Cost Explorer

    ce.us-east-1.amazonaws.com

  • EC2

    ec2.{region-id}.amazonaws.com

  • Elastic Load Balancing

    elasticloadbalancing.{region-id}.amazonaws.com

  • IAM

    iam.amazonaws.com

  • Organizations

    organizations.{region-id}.amazonaws.com

  • Performance Insights

    pi.{region-id}.amazonaws.com

  • Price List

    pricing.us-east-1.amazonaws.com

  • Relational Database Service (RDS)

    rds.{region-id}.amazonaws.com

  • Resource Groups

    resource-groups.{region-id}.amazonaws.com

  • Savings Plans (Optional: Required if you use Savings Plans in your environment)

    savingsplans.amazonaws.com

  • Service Catalog

    servicecatalog.{region-id}.amazonaws.com

  • S3

    s3.{region-id}.amazonaws.com

  • Storage Gateway

    storagegateway.{region-id}.amazonaws.com

Next step

In AWS, set up an access key or IAM role that Turbonomic will use to connect to your AWS environment. For details, see this topic.