DocumentationExperience Cloud KCS

Identify dedicated egress IPs for primary and secondary regions in Adobe Experience Manager as a Cloud Service

Last update: October 3, 2026

This article explains how to identify dedicated egress IP addresses for the primary and additional Publish regions in Adobe Experience Manager (AEM) as a Cloud Service when dedicated egress networking is configured for those regions. A DNS lookup can return one region-specific IP address without identifying the region it belongs to. To confirm the address for each region, verify the Cloud Manager configuration, collect DNS results from resolvers in the relevant geographic areas, and ask Adobe Support to confirm the region-to-IP mapping before updating an external allowlist.

Description description

Environment

  • Adobe Experience Manager as a Cloud Service
  • Dedicated egress networking configured for the primary and relevant additional Publish regions
  • Cloud Manager program with advanced-networking infrastructure enabled for the affected environment in each region

Issue/Symptoms

  • A DNS lookup of the program hostname returns one IP address for the DNS response.
  • The DNS response doesn’t identify whether the returned IP belongs to the primary or an additional Publish region.
  • You need to identify the egress IP for each configured region for outbound allowlisting or network configuration.

Cause

DNS resolution for the environment’s external hostname usually returns the egress IP of the region closest to the querying client. There is no built-in feature in the AEM Cloud Service UI to directly list all regional egress IPs.

Resolution resolution

Follow these steps to identify and verify the egress IP address for your environment.

  1. Obtain your environment’s external hostname. The hostname typically follows this format: <your-environment-hostname>.external.adobeaemcloud.com.

  2. Run a DNS lookup against the external hostname from your local machine using tools such as nslookup or dig.

    • nslookup <your-environment-hostname>.external.adobeaemcloud.com
    • dig +short <your-environment-hostname>.external.adobeaemcloud.com

  3. Review the returned IP address. The result typically represents the egress IP for the region serving your DNS request.

  4. To identify the egress IP for another region, run the same DNS lookup from a machine in that region or use a DNS lookup service that supports geographic query locations.

  5. If you need the definitive egress IP addresses for all configured regions, contact Adobe Support and request the dedicated egress IP information for your environment.

  6. After obtaining the IP addresses, update any required allowlists, firewall rules, or network configurations and verify outbound connectivity.

recommendation-more-help
experience-cloud-kcs-help-kbarticles