How to send Connector Logs to SecureAuth automatically

Version Affected:  All cloud IdPs

Description:  

The Connectors store their logs locally. However, they can also send them to us for the Kafta service using port 9092. 

This uses the address

pkc-4nym6.us-east-1.aws.confluent.cloud

Cause:  

This address often changes IP addresses and can be on any of the US-East-1 AWS Public IPs

Resolution:  

If you can whitelist by DNS name, simply adding pkc-4nym6.us-east-1.aws.confluent.cloud on port 9092 should be enough for us to receive your connector logs. 

If you must whitelist by IP, you can get the list from https://ip-ranges.amazonaws.com/ip-ranges.json

Special Considerations:  

Using Powershell, you can filter by region using this command

(Invoke-RestMethod -Uri "https://ip-ranges.amazonaws.com/ip-ranges.json").prefixes | 
Where-Object { $_.region -eq "us-east-1" } | 
Select-Object -ExpandProperty ip_prefix | 
Sort-Object -Unique

SecureAuth Knowledge Base Articles provide information based on specific use cases and may not apply to all appliances or configurations. Be advised that these instructions could cause harm to the environment if not followed correctly or if they do not apply to the current use case.

Customers are responsible for their own due diligence prior to utilizing this information and agree that SecureAuth is not liable for any issues caused by misconfiguration directly or indirectly related to SecureAuth products.