Filing this as an explicit subtask since @dr0ptp4kt and @Miriam also have a use case for swift being reachable from analytics.
Please open 443/tcp from analytics to prod for swift.svc.eqiad.wmnet and swift.svc.codfw.wmnet (10.2.2.27 and 10.2.1.27 respectively)