5 - Outbound allow-list
Scenario 3 only. The default allows pypi.org, files.pythonhosted.org, *.anaconda.com and conda.anaconda.org. Replace it with exactly what your environment needs:
Fewer hosts is safer, but training jobs that install packages fail if a host is missing.
Back to Options.