Outbound connections
Mitzu runs in your AWS account and sends nothing to Mitzu. These are the connections your deployment can make. All server traffic leaves through the stack's NAT gateway, so you can check it against your own network logs.
AWS services
The stack has no VPC endpoints, so these also leave through the NAT gateway. Allow them if you restrict outbound traffic, or tasks can't start.
| Service | Used for | When |
|---|---|---|
Amazon ECR, in the AWS Marketplace registry 709825985650, and the Amazon S3 storage behind it | Pulling the Mitzu image | When a task starts |
| AWS Secrets Manager | Reading the stack's secrets | When a task starts |
| Amazon CloudWatch Logs | Writing logs | Always |
| AWS License Manager | Checking your Marketplace licence | At startup and every 15 minutes |
| Amazon Cognito | Sign-in and invites | Every sign-in and invite |
| Amazon SES, if you set it up | Invite emails, and other emails through SMTP | When an email is sent |
Amazon RDS, ElastiCache and EFS stay inside the stack's private network.
Connections you configure
| Host | Connects from | When |
|---|---|---|
| Your data warehouses | Server | Connection tests, queries and indexing |
Your model endpoint: api.anthropic.com or your own gateway | Server | Each AI question, if you turn on AI |
| Your identity provider | Server and browser | SSO setup and sign-in, if you connect SSO |
| Your SMTP server | Server | Alert, report and agent emails, if you set them up |
Your Databricks workspace and accounts.cloud.databricks.com | Server and browser | Databricks connections with OAuth |
With an Anthropic key, your questions, the table and column names they involve, and query results the agent reads go to Anthropic under your own account. Use a gateway to keep model traffic inside your network.
Third-party services
| Host | Connects from | When |
|---|---|---|
basemaps.cartocdn.com | Browser | Showing a country map chart, for its background map |
Links people click
Pages link to docs.mitzu.io, www.mitzu.io, claude.ai, support.claude.com, docs.databricks.com
and the Mitzu Slack community. These open only when someone clicks them. Images in dashboard text cards
load from whatever address their author used.
What's turned off
These are switched off in the image, not just left without a key: product usage tracking, marketing tags, support chat, content delivery networks for styles, and Google sign-in. Mitzu's Claude Code component runs with its telemetry, error reporting and automatic updates off.