Firewall access - allowed IP addresses

Access to Schematics using IAM allowed IP addresses has been replaced with context based restrictions.

Performing post-configuration of deployed resources using workspace and action jobs requires IP network access to the resources private cloud network zones. Typically these private networks are protected using a firewall or VPC access control policies. To allow the Schematics hosted instances of Terraform and Ansible to access these zones, firewall or VPC access policies must be configured to permit access to the Schematics originating IP addresses.

Typically post-configuration is performed through SSH as illustrated with Schematics actions performing configuration operations over SSH using Ansible. With Ansible a bastion host must be configured to enable secure SSH access. Refer to the Schematics actions documentation for details of the required VPC network configuration and bastion host setup.