Currently a client connecting and using a content template requires a connection to https://s3.us-east-1.amazonaws.com/  as that is where the packages are stored.  Some customers may need to adjust their firewalls to account for this.

This is not documented anywhere however.  We should document this in the content template documentation

We should come up with a recommendation of text and pass this ticket to anikandr@redhat.com 

We also should update this kbase article:

https://access.redhat.com/solutions/1583183