Hi. What firewall rules are required to allow an agent inside a closed-off environment to reach Cloud 2.0? • https://api.prefect.cloud should be reachable (note the IP addess can change_)_ • Ports: 443. Only 443?

Yup, I think that’s it. The IP address is a load balancer without any other forwarding rules other than 443, so that’s the only port that would be connectable by anyone. We don’t change the IP address as a matter of our normal operations, but it’s not guaranteed to stay the same forever, so it’s a good thing that your firewall can tolerate that!