DocumentationExperience Cloud KCS

Allowlist AEM as a Cloud Service outbound traffic with a Dedicated Egress IP

Last update: October 2, 2026

This article explains how to determine the outbound IP addresses used by Adobe Experience Manager (AEM) as a Cloud Service environments, so you can allowlist them with external services when required.

Description description

Environment

  • Adobe Experience Manager as a Cloud Service
  • AEM as a Cloud Service program with Advanced Networking
  • External service that requires a stable outbound source IP

Issue/Symptoms

  • You need to allowlist the source IP used by AEM as a Cloud Service when it calls an external service.
  • You can’t rely on AEM’s default outbound IP because it can change.
  • Your external service requires a stable source IP before it will accept AEM-originated connections.

Cause

By default, AEM as a Cloud Service uses shared, dynamic outbound IP addresses. If your external service requires a stable source IP, configure a Dedicated Egress IP through Advanced Networking. The network infrastructure is created at the program level and must be enabled on each environment that needs to use it.

Resolution resolution

Follow the steps below to resolve the issue:

  1. Determine whether your integration with external systems requires a static outbound IP address for allowlisting or network access control.
  2. If a static outbound IP address is required, configure Advanced Networking with Dedicated Egress IP for your AEM as a Cloud Service environments through Cloud Manager.
  3. Set up Dedicated Egress IP by following the instructions in the Adobe documentation.
  4. After the configuration is complete, obtain the Dedicated Egress IP address assigned to your program. This IP address is used for outbound traffic from all AEM environments within the program.
  5. Provide the Dedicated Egress IP address to the external service provider and ask them to allowlist it.
  6. Verify that outbound connections from AEM as a Cloud Service to the external service are successful after the IP address has been allowlisted.
recommendation-more-help
experience-cloud-kcs-help-kbarticles