1. 程式人生 > >Use IAM Roles to Restrict API Calls from Specific IP Addresses

Use IAM Roles to Restrict API Calls from Specific IP Addresses

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": {
        "AWS": "arn:aws:iam::account-id:user/<username>"
      },
      "Action": "sts:AssumeRole"
    },
    {
      "Effect": "Deny",
      "Principal": {
        "AWS": "arn:aws:iam::account-id:user/<username>"
      },
      "Action": "sts:AssumeRole",
      "Condition": {
        "NotIpAddress": {
          "aws:SourceIp": [
            "103.15.250.0/24",
            "12.148.72.0/23"
          ]
        }
      }
    }
  ]
}

相關推薦

Use IAM Roles to Restrict API Calls from Specific IP Addresses

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Principal": { "AWS": "arn:aws:iam::account-id:user/&

Use IAM Tags to Restrict EC2 Instances or EBS Volumes

{ "Version": "2012-10-17", "Statement": [ { "Sid": "AllowToDescribeAll", "Effect": "Allow",

Use Watson Studio to visualize query results from Watson Discovery News

Summary Is it possible to get a pulse of the overall sentiment of something using news articles? The answer is yes. Using Watson serv

How we serve 25M API calls from 10 scalable global endpoints for $150 a month

I woke up on Black Friday last year to a barrage of emails from users reporting 503 errors from the ipdata API.Our users typically call our API on each pag

Ask HN: How to generate API documentation from .md/.rst files?

How would you go about generating single-page API documentation using either .md or .rst files? Is there a managed service available? Something like Stripe

Use IAM Policies to Grant Access to User

{ "Version": "2012-10-17", "Statement": [ { "Sid": "AllowUserToSeeBucketListInTheConsole", "Action": [

Use CloudFront Geo Restriction To Restrict Access From Geographic Regions

You can use the geo restriction feature, also known as geoblocking, to prevent users in specific geographic locations from accessing content th

[Nuxt] Use Vuex Actions to Delete Data from APIs in Nuxt and Vue.js

export begin async delet tin remove todo ras alt You‘ll begin to notice as you build out your actions in Vuex, many of them will look qui

Odoo12 ORM API ☞ Porting from the old API to the new API

Porting from the old API to the new API(從舊API移植到新API) 在新API中應避免使用ids列表,而是使用記錄集 仍舊使用舊API編寫的方法應由ORM自動轉換,無需切換到舊API,只需將它們稱為新API方法即可 *searc

Restrict Access to Launch EC2 Instances from Only Tagged AMIs

{ "Version": "2012-10-17", "Statement": [ { "Sid": "ReadOnlyAccess", "Effect": "Allow", "Act

API calls to Auto Scaling are throttled

To prevent or mitigate “Rate Exceeded” errors and throttling, try these solutions: Validate “describe” calls Excessive “d

How to Enable MFA Protection on Your AWS API Calls

Multi-factor authentication (MFA) provides an additional layer of security for sensitive API calls, such as terminating Amazon EC2 instances or de

SDN實戰:Build a VXLAN Tunnel by Making Python-based API Calls for DCI

python restful api vxlan ovsdbSDN IN ACTION: Build a VXLAN tunnel by making Python-based API Calls on OpenDaylight and Provide the DCI service 薛國鋒

[React] Use the new React Context API

overflow fan sum codes deep ndb ext sso mov The React documentation has been warning us for a long time now that context shouldn‘t be use

net core swaagger ui 報 Failed to load API definition錯誤

net 解決 alt class led 報錯 inf com post 在net core webapi用swaagger 報錯記錄,截圖如下 解決辦法,出現這種是因為我的controller裏面的有一個方法確缺少了HttpGet attribute就是aucti

Red Hat Enterprise 7.5 安裝後無法進入圖形界面 This system is not registered with an entitlement server. You can use subscription-manager to register.

rpm 2.0 轉載 scrip HA 匿名 rgs version 圖形界面 This system is not registered with an entitlement server. You can use subscription-manager to reg

FaceBook登陸API -- Login with API calls

ood everyone alter ken pos val seq sha center Login with API calls Related Topics Understanding sessions FBSession Error h

Fragment null must be a public static class to be properly recreated from instance state.

Fragment null must be a public static class to be properly recreated from instance state. Android裡做一個RadioGroup實現底部導航頁面,遇到了這樣的問題: FATAL EXCEPTIO

[tensorflow] 如何從pb模型檔案中獲得引數資訊 How to obtain parameters information from a tensorflow .pb file?

因為要和SOTA比較模型的複雜度,我想知道引數數量。但是模型檔案不是tensorflow checkpoint,而是pb檔案,我發現當匯入graph後,tf.trainable_variables()返回空。 Problem setting : I need to compare wit

Configure a proxy for your API calls with Angular CLI

Table of contents Local development setup with Angular Issue: Dev server plus backend API Configuring your Angular CLI dev-server proxy Local de