looking to have traffic originating from any country other than the SA and Mexico blocked

0

What is the best way to filter traffic by country, just want to have traffic from 2 countries traversing our AWS and block all other countries

feita há 2 anos636 visualizações
2 Respostas
0

If you are using AWS CloudFront Distribution service, you can configure Allow-list in Geographic restriction section to allow for SA and Mexico. And whatever origin is fronted by CloudFront, you will configure it to only allow connections via CloudFront and no direct-access to Origin ( for example ALB).

respondido há 2 anos
  • We are not using AWS CloudFront Distribution service, any other option ?

0

There are 3 ways to block traffic by Geo, these can be used for public facing endpoints such as Elastic Load Balancers:

  1. Using CloudFront Distributions: https://repost.aws/knowledge-center/cloudfront-geo-restriction
  2. Using AWS WAF: https://repost.aws/knowledge-center/waf-allow-block-country-geolocation
  3. Using Route53: Not blocking but redirect users outside of the approved Geos to a different endpoint with either an error or no reply.

If these solutions are not applicable can you provide extra details about your use case, like the services you want to restrict, which will help people answer.

AWS
Rob
respondido há 2 anos
profile pictureAWS
ESPECIALISTA
avaliado há 2 anos

Você não está conectado. Fazer login para postar uma resposta.

Uma boa resposta responde claramente à pergunta, dá feedback construtivo e incentiva o crescimento profissional de quem perguntou.

Diretrizes para responder a perguntas