As an IT specialist for my district, what should I allow through our firewall so students can access CommonLit?

Accessing CommonLit:

Port 443 must be open.
The network should open firewalls for www.commonlit.org, and commonlit.org subdomains.
The network should allow access to commonlit-private-assets.s3.amazonaws.com and commonlit-audio.s3.amazonaws.com.
We don't have a stable IP range because we are on a cloud provider that frequently shifts IP addresses.
Our site runs on React JavaScript and occasionally, browser extensions can disrupt JavaScript, so we encourage limiting the use of new and untested browser extensions.

Our support page for students is managed by Zendesk (https://support.commonlit.org/hc/en-us/categories/360000796933-CommonLit-Digital-Student-Experience).
When CommonLit has an outage, we report it on status.commonlit.org pop-ups. We know sometimes students see "Restricted" on these pop-ups when their devices block Statuspage. Our status page is managed by Atlassian Status page. The direct link to permit for students it https://rwty6j9rbg6v.statuspage.io/.

Our CommonLit 360 materials link extensively to Google Docs, with several youtube.com or vimeo.com videos in our related media explorations as well. The biggest thing we recommend for teachers on the 360 platform is allowing access to Google Docs from outside of the district's G Suite.
Additionally, our related media on texts in our supplemental (non-360) library comes from a variety of sources - most notably, from across youtube.com. The list of related media providers we embed directly on the site is:
- youtube.com
- ted.com
- vimeo.com
- time.com
- npr.org
- nytimes.com
- history.com
- nationalgeographic.com (there are variations on this URL — e.g. kids.nationalgeographic.com, video.nationalgeographic.com)
- We also will link to several other educational websites (such as museums or virtual maps) for particular lessons.