You need to set up an image URL proxy allowlist to enable image loading for specific domains in Google Workspace. This allows you to bypass the image proxy protection for trusted internal URLs that might otherwise break due to cookies or IPs.


To configure the image URL proxy allowlist setting, follow these steps:


  1. Sign in to your Google Admin console using your administrator account (does not end in @gmail.com).
  2. Go to Menu / Apps / Google Workspace / Gmail / End User Access in the Admin console.
  3. On the left, select your top-level organization.
  4. Scroll to the Image URL proxy allowlist section.
  5. Enter image URL proxy allowlist patterns. Matching URLs will bypass image proxy protection. See the guidelines below for more details and instructions.
  6. In our use case, we suggest using the following patterns to match images sent by ATTACK Simulator:
    • amazonaws.com/
    • attacksimulator.com/
    • googleapis.com/
    • sendgrid.net/
  7. At the bottom, click Save.