Per customer conversations. I am making a searchable post to answer the question in the subject.
Answer:
If CI is running in AWS you don’t need or want the socks proxy, just use ordinary AWS VPC mechanisms to give CI access to Datomic Cloud, see e.g.
https://docs.datomic.com/cloud/operation/client-applications.html