looking to have traffic originating from any country other than the SA and Mexico blocked

0

What is the best way to filter traffic by country, just want to have traffic from 2 countries traversing our AWS and block all other countries

preguntada hace 2 años626 visualizaciones
2 Respuestas
0

If you are using AWS CloudFront Distribution service, you can configure Allow-list in Geographic restriction section to allow for SA and Mexico. And whatever origin is fronted by CloudFront, you will configure it to only allow connections via CloudFront and no direct-access to Origin ( for example ALB).

respondido hace 2 años
  • We are not using AWS CloudFront Distribution service, any other option ?

0

There are 3 ways to block traffic by Geo, these can be used for public facing endpoints such as Elastic Load Balancers:

  1. Using CloudFront Distributions: https://repost.aws/knowledge-center/cloudfront-geo-restriction
  2. Using AWS WAF: https://repost.aws/knowledge-center/waf-allow-block-country-geolocation
  3. Using Route53: Not blocking but redirect users outside of the approved Geos to a different endpoint with either an error or no reply.

If these solutions are not applicable can you provide extra details about your use case, like the services you want to restrict, which will help people answer.

AWS
Rob
respondido hace 2 años
profile pictureAWS
EXPERTO
revisado hace 2 años

No has iniciado sesión. Iniciar sesión para publicar una respuesta.

Una buena respuesta responde claramente a la pregunta, proporciona comentarios constructivos y fomenta el crecimiento profesional en la persona que hace la pregunta.

Pautas para responder preguntas