How to Restrict API Endpoints for Game Servers in Gamelift only?

Question

Hi, I am developing a game and is curious to know how I can restrict the CRUD api requests to be originating from my Gamelift servers only. In other words, how can I restrict the IP addresses that can use the  api endpoints that trigger lambda be from a particular IP range that AWS has? Any idea would be highly appreciated.

Answer

Hello,

You can create a [private API Gateway connection](https://docs.aws.amazon.com/gamelift/latest/developerguide/infrastructure-security.html) with the [VPC of Gamelift](https://docs.aws.amazon.com/gamelift/latest/developerguide/infrastructure-security.html) or even if you are not using APi Gateway, you can try a more direct integration with [Lambda VPC endpoints](https://docs.aws.amazon.com/lambda/latest/dg/configuration-vpc-endpoints.html).

Hope it helps,

How to Restrict API Endpoints for Game Servers in Gamelift only?

Relevant content