Quick Start: IP Allowlist Configuration

Quick Allowlist Summary

Use this table for quick firewall configuration. All traffic is outbound unless otherwise specified.

Domain / Service	Ports	Protocol	Purpose
`*.prepared.live`	443	TCP	Core Prepared Live services
`turn.prepared.live`	443, 3478	TCP, UDP	WebRTC TURN relay (media routing)
`turn-ephemeral.prepared911.com`	443, 3478	TCP, UDP	WebRTC TURN relay (ephemeral sessions)
`stream.prepared.live`	443, 3478	TCP, UDP	Media streaming
`*.prepared911.com`	443	HTTPS	Core platform services (API, portal, CDN)
`rp.prepared911.com`	31092	TLS	Real-time platform service
`*.ion.prepared.live`	443	HTTPS	ANET / ION services
`*.preparedapp.com`	443	HTTPS	Prepared app services
`live-production-media.s3-fips.us-east-1.amazonaws.com`	443	HTTPS	Media storage
`cognito-idp-fips.us-east-1.amazonaws.com`	443	HTTPS	Authentication
`maps.googleapis.com`	443	HTTPS	Mapping services
`maps.gstatic.com`	443	HTTPS	Map assets
`fonts.googleapis.com`	443	HTTPS	UI fonts

*.prepared.live:443 (TCP)
turn.prepared.live:443 (TCP), 3478 (UDP)
turn-ephemeral.prepared911.com:443 (TCP), 3478 (UDP)
stream.prepared.live:443 (TCP), 3478 (UDP)

*.prepared911.com:443 (HTTPS)
rp.prepared911.com:31092 (TLS)

*.ion.prepared.live:443 (HTTPS)
*.preparedapp.com:443 (HTTPS)

live-production-media.s3-fips.us-east-1.amazonaws.com:443
cognito-idp-fips.us-east-1.amazonaws.com:443

maps.googleapis.com:443
maps.gstatic.com:443
fonts.googleapis.com:443