diff --git a/roles/batcave/files/allows b/roles/batcave/files/allows
index 2a721d8faa..77f09c11e2 100644
--- a/roles/batcave/files/allows
+++ b/roles/batcave/files/allows
@@ -116,6 +116,9 @@ require ip 8.43.85.78
 require ip 8.43.85.79
 
 
+# ec2 instances
+require ip 13.250.126.156
+
 #
 # We put this at the end because it fails for hosts with no reverse dns
 # and then they don't check the rest of the ip allows.