Can I whitelist IP addresses for LiveKit Cloud webhooks?

This question originally came up in our Slack community and the thread has been consolidated here for long-term reference.

We have set up webhooks in LiveKit Cloud for room events. This means we have to open up one of our services.

Does LiveKit Cloud send webhooks from specific IP ranges so we can whitelist those and keep security optimal?

No, LiveKit does not guarantee the IP address/range that webhook requests originate from.

To enhance security, incoming webhook requests contain a signed JWT token that you can verify. This is the recommended approach for securing your webhook endpoint.