docs: reference aio runtime ip-list get for egress IP allowlisting#573
Merged
Conversation
aio-cli-plugin-runtime 8.3.0 adds `aio runtime ip-list get`, which exposes Adobe I/O Runtime's outbound (egress) IP ranges. Two pages previously stated that Runtime "does not expose egress IPs" and presented a proxy as the only option, which now contradicts the shipped feature. - security-general.md: rewrite "Secure communication with back-end services" to document the new command, the one-time terms/contact-email prompt, and the guidance to re-fetch rather than hard-code ranges; keep the proxy as the option for a single stable IP / mTLS. - configuringproxy.md: reframe the intro so the proxy is the deliberate choice for a fixed IP or mTLS, and link back to the egress IP ranges command for the allowlist-only case.
Contributor
🔍 Linter ReportClick to expand full reportThis comment was automatically generated by the linter bot. |
Contributor
🔍 Linter ReportClick to expand full reportThis comment was automatically generated by the linter bot. |
Contributor
🔍 Linter ReportClick to expand full reportThis comment was automatically generated by the linter bot. |
dthampy
approved these changes
Jun 3, 2026
purplecabbage
approved these changes
Jun 3, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
@adobe/aio-cli-plugin-runtime8.3.0 addedaio runtime ip-list get, which returns Adobe I/O Runtime's outbound (egress) IP ranges so developers can update corporate/network allowlists without filing a support ticket.Two docs pages currently tell readers the opposite — that Runtime "does not expose egress IPs" and that a proxy is the only way to allowlist downstream traffic. This PR brings those pages in line with the shipped feature.
Changes
guides/runtime_guides/security-general.md— rewrote "Secure communication with back-end services" to documentaio runtime ip-list get, the one-time terms/contact-email prompt per Adobe org, and the guidance to re-fetch the ranges (rather than hard-code addresses) since they can change. The proxy remains documented as the option for a single stable IP or mTLS.guides/runtime_guides/reference_docs/configuringproxy.md— reframed the intro so the proxy is presented as the deliberate choice when you need a fixed IP or mTLS, with a link back to the egress IP ranges command for the allowlist-only case.