Skip to content
By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post
About re:Post

Assistance Needed with Endpoint Whitelisting for Multiple AWS Services

0

We are working on an implementation that leverages multiple AWS services, including IAM, STS, Cost Explorer, and others, to retrieve and save service-based costs for various accounts using assumed IAM roles. The solution is deployed in a customer's AWS cloud environment, and we need to ensure that the appropriate endpoints are whitelisted for the regions used in our application. While there were no security restrictions in our development environment, we encountered several security restrictions upon deployment to the production environment.

Summary of Services and SDKs:

AWS SDK Dependencies:

IAM STS - Global Cost Explorer - US East (N. Virginia) [us-east-1] Security Hub Organizations Regions Utilized:

STS (Global Endpoint) for IAM role assumption US East (N. Virginia) [us-east-1] for Cost Explorer API Could you kindly assist us in identifying the specific endpoints that need to be whitelisted in the customer's AWS environment to ensure that the code runs smoothly and that all services can be accessed without interruption?

Your assistance would be greatly appreciated.

Topics
Cloud Financial ManagementSecurity, Identity, & Compliance
Tags
AWS Identity and Access ManagementAWS Cost ExplorerAWS Security Hub
Language
English

asked 2 years ago511 views

1 Answer
0

Hello,

To ensure your implementation runs smoothly in the customer's AWS environment, you'll need to whitelist specific service endpoints for the regions you're utilizing. Here's what you should whitelist:

  1. IAM and STS:

IAM: https://iam.amazonaws.com (Global) STS: https://sts.amazonaws.com (Global)

  1. Cost Explorer:
  1. Security Hub (if used):
  1. Organizations:

Ensure these endpoints are whitelisted in your security settings for the specific regions. You can find more detailed information on the specific service endpoints in the AWS Documentation. This will allow your application to access the necessary services without interruption.

EXPERT

answered 2 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Relevant content