If you need to set up an IP allowlist (e.g. on a corporate firewall or your own service) and you need to know IP ranges used by PDF.co API then please check below
The IPs in use by PDF.co Web API at any given time are highly dynamic, meaning that the published ranges may cover other IP addresses not currently in use by PDF.co Web API. This means that it is often not desirable to open up your firewall to the whole of the AWS region for security reasons. If you wanted to do this regardless you can find the published IP ranges from AWS here: https://docs.aws.amazon.com/general/latest/gr/aws-ip-ranges.html
You can find IP addresses used by PDF.co Web API (as of Jul 29 2020) with the jq tool:
.prefixes[] | select(.region==”us-west-2″) | select(.service==”EC2″).
You can use JQ JSON filtering tool online at https://jqplay.org/
Output Files Security
Output files generated by PDF.co API are stored on Amazon AWS S3 storage and encrypted at rest with AES-256 military-grade encryption. Access links generated for these files use a highly randomized 20+ randomized access token.
All output files are automatically removed by the service within 1 hour (unless a special parameter is set by the user to store file longer than 1 hour). To immediately remove output file please use /file/delete/ endpoint.
For more information about the security features of PDF.co please visit the Security page
Zapier, Integromat, and other integrations
If you use Zapier, Integromat, or another platform with the PDF.co plugin then please be aware that these platforms act as intermediate layers to access your files so you will see their IP addresses instead of PDF.co Web API addresses.
Private Instances (PDF.co Web API and API Server private instances)
If you have purchased a private instance of API Server or PDF.co Web API then please contact us to get the IP address of your instance.
last updated July 29, 2020