What must be done before making a callout to an external endpoint?

Before making a callout to an external endpoint in Salesforce, it is essential to authorize the endpoint URLs in the Remote Site Settings. This step ensures that Salesforce is aware of the external endpoint and allows secure communication between Salesforce and the external service. By adding the endpoint to the Remote Site Settings, you essentially provide the necessary permission for Salesforce to make outbound requests to the specified URL.

This process is crucial for maintaining security, as it prevents unauthorized external calls from being made, which could expose sensitive information or lead to unwanted data breaches. Proper configuration of Remote Site Settings is a fundamental practice in Salesforce integration to safeguard the platform while enabling effective interactions with external systems.