Configure your resource server's firewall principles to include the previous step's outputted IP address on port 3306. Puppet operates by default within a server/agent product. Agents fetch their “catalog” (final wished-for condition) from the grasp and implement it regionally