Yup, I think that’s it.
The IP address is a load balancer without any other forwarding rules other than 443, so that’s the only port that would be connectable by anyone.
We don’t change the IP address as a matter of our normal operations, but it’s not guaranteed to stay the same forever, so it’s a good thing that your firewall can tolerate that!