Where do I find Panther's IP address to add to my allow list?

QUESTION

I want to add Panther's IP address to my allow list for accessing some of my other tools, like Snowflake. How can I find this IP address?

ANSWER

 Any services run by Panther from within your detections that need to access external resources do so from a common IP, unique to your instance. To view this in your Panther Console, navigate to Settings > General, and look for the Gateway Public IP at the bottom of the screen:

Internal resources, like lambdas that access S3 buckets for log ingestion, may originate from randomly assigned AWS IPs, while others have a VPC config. The lambdas with a VPC config will egress using your Gateway Public IP shown above.