Hello,We identified that the issue is caused by the network configuration. Specifically, access to the global terrain and base map services hosted on AWS is being blocked.
For your reference, and for anyone who may encounter a similar situation, please ensure that the following endpoints and services are allowed in your network configuration.
Regarding the system/web application itself, we use the following IP addresses:However, allowing only these IP addresses is not sufficient for full functionality. The application relies on AWS S3 Object Storage for data storage and delivery, utilizing S3 Transfer Acceleration.
Obtaining a fixed list of IP addresses for this service is challenging because it operates on AWS's global network and edge locations. As a result, the S3 bucket hostname may resolve to different IP addresses depending on the client's geographic location and network routing. AWS does not provide a dedicated or static set of IP addresses for a specific S3 bucket or Transfer Acceleration endpoint.
The most comprehensive list of AWS IP ranges can be downloaded using:
curl -O https://ip-ranges.amazonaws.com/ip-ranges.jsonYou can then filter the global AWS address ranges with:
jq '.prefixes[] | select(.region=="GLOBAL") | select(.service=="AMAZON")' < ip-ranges.jsonPlease note that even after filtering, the resulting list will be quite large and may change periodically as AWS updates its infrastructure.
The preferred approach is to configure your firewall to allow traffic based on FQDNs/hostnames rather than individual IP addresses, provided your firewall supports this functionality.
Additionally, access to the AWS S3 address pool used in the eu-west-1 region may be required. These addresses can be filtered with:
jq '.prefixes[] | select(.region=="eu-west-1") | select(.service=="S3")' < ip-ranges.jsonConfiguring access by hostname/FQDN remains the recommended solution, as it avoids ongoing maintenance associated with changing AWS IP ranges.
Please let us know if you need any additional information or assistance with the configuration.