Firewall access for Cloud Object Storage
When creating a connection to a Cloud Object Storage bucket that is protected by a firewall, the connector automatically maps to private IP addresses for Cloud Pak for Data as a Service. The private IP addresses must be added to a Bucket access policy to allow inbound connections from Cloud Pak for Data as a Service. Private IP addresses are required only when Cloud Pak for Data as a Service and Cloud Object Storage are located on the same network.
Follow these steps to look up the private IP addresses for the Cloud Pak for Data as a Service cluster:
- Go to the Administration > Cloud integrations page.
- Click the Firewall configuration link to view the list of IP ranges used by Cloud Pak for Data as a Service.
- Choose Include private IPs to view the private IP addresses for the Cloud Pak for Data as a Service cluster.
- From your IBM Cloud Object Storage instance on IBM Cloud, open the Buckets list and choose the Bucket for the connection.
- Copy each of the private IP ranges listed and paste them into the Buckets>Permissions>IP address field on IBM Cloud.
Learn more
Parent topic: Configuring firewall access