Firewall access for Cloud Object Storage

Private IP addresses are required when Cloud Pak for Data as a Service and Cloud Object Storage are located on the same network. When creating a connection to a Cloud Object Storage bucket that is protected by a firewall on the same network as Cloud Pak for Data as a Service, the connector automatically maps to private IP addresses for Cloud Pak for Data as a Service. The private IP addresses must be added to a Bucket access policy to allow inbound connections from Cloud Pak for Data as a Service.

Follow these steps to look up the private IP addresses for the Cloud Pak for Data as a Service cluster and add them to the Bucket access policy:

1. Go to the Administration > Cloud integrations page.
2. Click the Firewall configuration link to view the list of IP ranges used by Cloud Pak for Data as a Service.
3. Choose Include private IPs to view the private IP addresses for the Cloud Pak for Data as a Service cluster.
   
4. From your IBM Cloud Object Storage instance on IBM Cloud, open the Buckets list and choose the Bucket for the connection.
5. Copy each of the private IP ranges listed and paste them into the Buckets>Permissions>IP address field on IBM Cloud.
   

Learn more

• IBM Cloud Object Storage connection
• IBM Cloud docs: Setting a firewall

Parent topic: Configuring firewall access