Recommendation to Use Static IP's with CloudFront for configuration in a Firewall

0

Hello!

I need a recommendation for the best way or explore if it's possible to use static IP's addresses with CloudFront. We hired a service for an App that uses CloudFront, the challenge here is that in our company we need to have a firewall configure for any 3rd partner App, but since this 3rd Partner is using CloudFront the IP's ranges change in time to time. To make the changes in the firewall rules it takes several steps and procedures to be changing so having this dynamic IP's ranges changing is a request from our Cybersecurity team to ask for static IP's, is this possible to get with CloudFront, this in order to ask to the 3rd Partner to explore and modify in their service.

Thanks!

1 Answer
3
Accepted Answer

This is the exact use-case that led to the launch of Anycast Static IPs for CloudFront late last year. See the launch announcement here: https://aws.amazon.com/about-aws/whats-new/2024/11/amazon-cloudfront-anycast-static-ips/ - which in turn includes links to documentation and pricing.

AWS
EXPERT
answered 2 months ago
profile picture
EXPERT
reviewed 2 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions