AWS announces preview of AWS Interconnect - multicloud

AWS announces AWS Interconnect – multicloud (preview), providing simple, resilient, high-speed private connections to other cloud service providers. AWS Interconnect - multicloud is easy to configure and provides high-speed, resilient connectivity with dedicated bandwidth, enabling customers to interconnect AWS networking services such as AWS Transit Gateway, AWS Cloud WAN, and Amazon VPC to other cloud service providers with ease.

Restrict AWS Client VPN Access

We already have a AWS Client VPN Setup, which is working as expected.

My On Prem team is able to connect with AWS Client VPN and access Cloud Resources.

Now my management wants to restrict AWS Client VPN access from our corporate office only.

I tried it by making changes to Security Group associated with my AWS Client VPN endpoint by allowing only access from our corporate office CIDR. But when I tested, it is not working as expected, my other team members was able to access the EC2 over VPN from outside our on-premises network.

Even I tried keeping the entire in-bound rule as blank, but still I was able to SSH into my EC2 instance.

Is there a way, to restrict access for AWS Client VPN, so that it is accessible only from my corporate office, or a way to restrict that the traffic going from VPN should only be from my on-premises network.

주제: 네트워킹 및 콘텐츠 전송
태그: AWS 클라이언트 VPN 아마존 VPC 보안 그룹 네트워킹 및 콘텐츠 전송
언어: English

Shivkumar

질문됨 일 년 전989회 조회

1개 답변

최신
최다 투표
가장 많은 댓글

수락된 답변

Hello.

By enabling the client connect handler and creating a Lambda that rejects connections other than a specific public IPv4 address, you can limit connections to only those from the office.
https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/connection-authorization.html

전문가

Riku_Kobayashi

답변함 일 년 전

전문가

Oleksii Bebych

검토됨 일 년 전

전문가

Gary Mclean

검토됨 일 년 전

Shivkumar
일 년 전
Thanks Riku for the prompt response, allow me to check this implementation and get back to you.
Shivkumar
일 년 전
Hello Riku, it is working as expected, but one small question, then what is the use of the firewall associated with the AWS Client VPN? Which traffic it is controlling?
Riku_Kobayashi 전문가
일 년 전
It may be used to control which AWS resources a user can access as described in the following documentation: https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/security-best-practices.html

Use security groups to control which resources users can access in your VPC. For more information, see Security groups.

Restrict AWS Client VPN Access

답변 추가

관련 콘텐츠