How do I add IP addresses to the FusionAuth Cloud allow list?

FASupportBot

We need to add three AWS Elastic IPs to our FusionAuth Cloud allow list so our production application can make API calls to our FusionAuth Cloud instance. What are the requirements and process for getting IP addresses added to the allow list?

FASupportBot

FusionAuth Cloud can add IP addresses to your instance's allow list if they meet the following criteria:

Static: The IP address must be static and not change without notice.
Owned by your organization: The IP must be allocated to your company's infrastructure, not shared with other companies or resources (such as through a CDN).
Associated with production servers: The IP must be used by production servers, not developer laptops or office networks.

Once you confirm your IP addresses meet these criteria, open a support ticket through your FusionAuth account portal with:

The list of IP addresses to be added
Confirmation that each criterion is met
The FusionAuth Cloud hostname your application connects to

FusionAuth will then add the addresses to your allow list. Note that if you use shared network infrastructure (like NAT gateways), all traffic from that infrastructure will share the same outbound IP, which is acceptable as long as the criteria above are met.

Important notes:

Allow list changes typically take two to three business days to implement
Adding IPs to the allow list helps prevent 429 response codes and CAPTCHA challenges that may occur due to FusionAuth Cloud's rate limiting protections
If you no longer need an IP address on the list, you can submit a support ticket to have it removed

How do I add IP addresses to the FusionAuth Cloud allow list?

Related Documentation