AdministrationNetworkingManage network egress

Enable Private Network Egress

This is feature is only available if you are on the Team tier or above. See Astro Plans and Pricing.
Preview
This feature is in Preview.
Private Network Egress is currently only available on dedicated AWS clusters.

Astro supports Private Network Egress Mode for dedicated AWS clusters to ensure security and compliance, and to provide a data loss protection architecture to secure against unauthorized data transfer.

Enabling Private Network Egress Mode disables public internet connectivity from your Astro Deployments and makes private networking connections required to connect to external data services and external endpoints for Metrics Export. With Private Network Egress enabled, exports to public observability platforms like Grafana Cloud will be impacted.

An icon on Deployments and Deployment details pages indicate when a Deployment is on a cluster with Private Network Egress enabled.

Enable or disable Private Network Egress Mode for a cluster

Private Network Egress Mode can be enabled for new and existing dedicated AWS clusters.

A new Astro UI is here

Astronomer has redesigned the Astro UI. Try the new experience and switch your instructions using the New Astro UI and Legacy UI tabs on this page. Your selection is remembered across the docs.

  1. In the Astro UI, go to Settings > Clusters.
  2. Configure the egress mode:
  • For an existing dedicated cluster, click the cluster you want to edit. Then, enable Private Network Egress Mode in the Cluster Details.
  • For a new dedicated cluster, click + New Cluster and then enable Private Network Egress Mode in the Network Egress Management section during the initial configuration of the cluster.