InDesign Server FRL-Online Activation — Clarification on Provided IP Range

Hello Adobe Support,

We are setting up Adobe InDesign Server on an AWS EC2 instance using our FRL-Online license. We selected IP-address-based activation during license setup, and Adobe shared a range of IP addresses with us.

Before configuring our AWS networking, we need clarification on how this IP range is used. We are torn between two interpretations:

Approach 1 — Outbound (our IPs):
The provided IPs belong to our infrastructure, and Adobe expects the activation request to come from one of them. We must assign one of these IPs to our EC2 (e.g., as an Elastic IP) so Adobe sees activation traffic originating from an approved IP.

Approach 2 — Inbound (Adobe's IPs):
The provided IPs belong to Adobe's licensing servers, and Adobe will initiate the activation request to our EC2. We should allow inbound traffic from these IPs and ensure our EC2 is reachable.

Could you confirm:

1. Which approach is correct for FRL-Online activation?
2. Does our EC2 need a public IP / Elastic IP attached directly, or can outbound traffic egress through a NAT Gateway?
3. Is the activation request outbound from our EC2 to Adobe, or inbound from Adobe to our EC2?

Our EC2 currently has no public IP attached. We want to configure the network correctly before attempting activation.

Thank you.