[ENG-4258] docs: add Security section with outgoing IP addresses to allowlist

src/docs.json

@@ -321,6 +321,12 @@
                   "troubleshooting-guides/salesforce"
                 ]
               },
+              {
+                "group": "Security",
+                "pages": [
+                  "security/outgoing-ip-addresses"
+                ]
+              },
               "dev-and-prod-environments",
               "terminology",
               "unified-api"

src/generate-docs.ts

@@ -553,6 +553,12 @@ const baseConfig = {
             "troubleshooting-guides/salesforce"
           ]
         },
+        {
+          group: "Security",
+          pages: [
+            "security/outgoing-ip-addresses"
+          ]
+        },
         "dev-and-prod-environments",
         "terminology",
         "unified-api",

src/security/outgoing-ip-addresses.mdx

@@ -0,0 +1,20 @@
+---
+title: "Outgoing IP addresses"
+---
+
+All outgoing API requests from Ampersand to SaaS providers originate from a fixed set of IP addresses. If a provider app or API you are integrating with supports IP allowlisting (sometimes called whitelisting), add the following IP addresses to its allowlist so that requests from Ampersand are not blocked.
+
+## IP addresses to allowlist
+
+```
+34.53.82.136
+34.53.32.186
+34.182.109.175
+```
+
+These IP addresses apply to all outgoing traffic from Ampersand, including:
+
+- [Read actions](/read-actions): API calls to read data from providers.
+- [Write actions](/write-actions): API calls to write data to providers.
+- [Proxy actions](/proxy-actions): API calls proxied through Ampersand.
+- [Subscribe actions](/subscribe-actions): API calls to create and manage webhook subscriptions.