Setting up the watsonx.ai Studio and watsonx.ai Runtime services

You can provision the Enterprise plans of the watsonx.ai Studio and watsonx.ai Runtime services with watsonx.data as a Service. To set up the watsonx.ai Studio and watsonx.ai Runtime services for an organization, you must allow the node IP addresses access through the firewall.

The IP addresses for the watsonx.ai Studio nodes in each region must be configured as allowed IP addresses for the IBM Cloud account. When allowing specific IP addresses for watsonx.ai Studio, you include the CIDR ranges for the watsonx.ai Studio nodes in each region to allow a secure connection through the firewall.

Required roles

You must have the Editor or higher IBM Cloud IAM Platform role to allow IP addresses.

First look up the CIDR blocks in IBM watsonx, and then enter them into the Access(IAM) > Settings screen in IBM Cloud. Follow these steps:

1. From the IBM watsonx main menu, select Administration > Cloud integrations.
2. Click Firewall configuration to display the IP addresses for the current region.
3. Checkmark Show IP ranges in CIDR notation.
4. Click the icon to copy a CIDR block to the clipboard.
5. Enter the CIDR block of IP addresses into the Access(IAM) > Settings > Restrict IP address access > Allowed IP addresses for the IBM Cloud account.
6. Then click Save.
7. Repeat for each CIDR block until all are entered.
8. Repeat for each region.

For step-by-step instructions, see IBM Cloud docs: Allowing specific IP addresses.