Firewall access for Cloud Object Storage

When creating a connection to a Cloud Object Storage bucket that is protected by a firewall, the connector automatically maps to private IP addresses for Cloud Pak for Data as a Service. The private IP addresses must be added to a Bucket access policy to allow inbound connections from Cloud Pak for Data as a Service. Private IP addresses are required only when Cloud Pak for Data as a Service and Cloud Object Storage are located on the same network.

Follow these steps to look up the private IP addresses for the Cloud Pak for Data as a Service cluster:

1. Go to the Administration > Cloud integrations page.
2. Click the Firewall configuration link to view the list of IP ranges used by Cloud Pak for Data as a Service.
3. Choose Include private IPs to view the private IP addresses for the Cloud Pak for Data as a Service cluster.
   
4. From your IBM Cloud Object Storage instance on IBM Cloud, open the Buckets list and choose the Bucket for the connection.
5. Copy each of the private IP ranges listed and paste them into the Buckets>Permissions>IP address field on IBM Cloud.
   

Learn more

• IBM Cloud Object Storage connection
• IBM Cloud docs: Setting a firewall

Parent topic: Configuring firewall access