# Region: AWS Israel (Tel Aviv) data center

The port of all these URLs is 443.

Their traffic is outbound.

| URL | Used by | Purpose | Requirement level |
| --- | --- | --- | --- |
| <ul> <li>https://cdn.cloud.talend.com (New)</li> <li>https://statics.cloud.talend.com</li> </ul> | Web browser | The Content Delivery Network (CDN) used to store Talend Cloud<br>assets, such as images, .css files and .js files.<br><br>Without these URLs, the Talend Cloud UI will not load. | Required |
| https://storage.il.cloud.talend.com (New) | Talend Management Console<br><br>Talend Studio<br><br>Talend Remote Engine<br><br>Dynamic Engine | Storage DNS name. It is used by Talend Management Console, Talend Studio,<br>Talend Remote Engine,<br>and Dynamic Engine<br>to access the storage service. | Required |
| https://cdn.auth0.com/ | Web browser<br><br>Remote Engine<br><br>Talend Studio | Login to Talend Cloud<br>applications.<br><br>Talend Studio needs this URL only when it is running a Job that uses auth0 to connect to<br>Talend Management Console, for example a Talend Data Preparation Job. | Required |
| https://app.il.cloud.talend.com | Web browser | Talend Management Console<br>URL. | Required |
| https://tmc.il.cloud.talend.com/inventory | Talend Studio | Task artifact metadata is transferred from Talend Studio<br>to Talend Management Console<br>via this URL. | Required |
| https://minio.il.cloud.talend.com | Talend Studio<br><br>Remote Engine | When Accelerate Publish is enabled in Talend Studio,<br>Talend<br>Jobs are uploaded to these locations before they are eventually<br>executed.<br><br>Accelerate publish makes sense for large Jobs but does not bring significant differences to other Jobs. | Required |
| https://msg.il.cloud.talend.com | Remote Engine<br><br>Dynamic Engine | Used to communicate about task runs such as receiving, deploying, or undeploying events, and sending information about task run status and metrics. | Required |
| https://pair.il.cloud.talend.com | Remote Engine<br><br>Remote Engine Gen2<br><br>Dynamic Engine | Used for the initial pairing of the Remote Engine to its tenant. This service also communicates status information about this Remote Engine such as its heartbeats and availability. | Required |
| https://dts.il.cloud.talend.com | Remote Engine | Used to create one-time ephemeral URLs that are pre-signed to authorize resource file uploads from the Remote Engine to Talend Cloud. | Required |
| https://engine.il.cloud.talend.com | Remote Engine Gen2 | Used by Remote Engine Gen2 to set up one-time token generation authentication and WebSocket enablement. | Required |
| wss://engine.il.cloud.talend.com | Remote Engine Gen2 | Remote Engine Gen2 uses this WebSocket endpoint to receive requests to execute pipelines, fetch samples, and compute previews. | Required |
| https://app.il.cloud.talend.com/portal | Web browser | The Talend Cloud platform portal. | Required |
| https://iam.il.cloud.talend.com | Web browser | When you access the Talend Cloud platform portal, your session is tested via https://iam.il.cloud.talend.com. If a session is already open, your access is directly granted; if not, you are redirected to the login page. | Required |
| <ul> <li>https://vault-gateway.il.cloud.talend.com</li> <li>https://vault-external.il.cloud.talend.com/</li> </ul> | Remote Engine<br><br>Dynamic Engine | Used to send Job component metrics and Job volumetrics of data being processed for billing purposes.<br><br>This service also decrypts secrets used in pipeline task executions. | Required |
| https://webhooks.il.cloud.talend.com | Your third-party applications | Used to store your custom webhooks that are configured in Talend Management Console and used by your own third-party applications.<br><br>It is required only when an application in your infrastructure uses this endpoint. | Required |
| https://\*.talend.com | All Talend products | Ensures your smooth access to new features or technical evolution of Talend products, by minimizing the necessity for allowlist change on your side<br>when adopting those features or evolution.<br><br>The talend.com domain is fully secured. For<br>detailed URLs of the products or applications in this domain, see [Accessing Talend Cloud applications](https://help.qlik.com/talend/en-US/installation-guide-windows/Cloud/talend-cloud-application-url). | Recommended |
| https://ghcr.io/ | Remote Engine Gen2 | The Docker image to be used is fetched from this site. | Required |
| ghcr.io/talend | Dynamic Engine | Provide Docker images and Helm charts | Required |
| https://\*.launchdarkly.com | Web browser | LaunchDarkly is a third-party service used to manage the rollout of new features (Feature flipping).<br><br>The IP range used by LaunchDarkly is not static and can often evolve. For this reason, a wildcard address is recommended to use in your allowlist.<br><br>However, if a wildcard is not allowed due to restrictions of the security policy of your organisation, you can get the LaunchDarkly IPs to be used directly from [the LaunchDarkly documentation](https://apidocs.launchdarkly.com/reference#public-ip-list). | Required |
| https://\*.pendo.io | Web browser | Pendo is a third-party service used by Qlik to better understand the usage of its products and identify usability issues, on an anonymous basis. This service also allows in-product push notifications such as new feature announcements or important surveys. | Recommended |
| https://\*.ada.support | Web browser | Ada is a third-party service used to provide in-product chat capability with Qlik Support team. | Recommended |
| https://api.il.cloud.talend.com | Talend Studio | This URL is used by Talend Studio 8.0 if you have applied the 8.0 R2022-01 Talend Studio monthly update or a later one provided by Qlik. | Required |