Agents are lightweight process that live on you infrastructure. They poll Prefect Cloud for work to do every 10 seconds. They get the metadata around the job such as where the Flow is stored and how to run it. It then spins up a job to run it.
For example, the LocalAgent can be on your computer, and when it picks up a job, it will start a new process on the same machine to run the Flow. So it’s the IP of the LocalAgent machine that needs to be whitelisted since it’s the one doing the work.
Prefect doesn’t see your code or data by default