looking to have traffic originating from any country other than the SA and Mexico blocked

0

What is the best way to filter traffic by country, just want to have traffic from 2 countries traversing our AWS and block all other countries

已提问 2 年前636 查看次数
2 回答
0

If you are using AWS CloudFront Distribution service, you can configure Allow-list in Geographic restriction section to allow for SA and Mexico. And whatever origin is fronted by CloudFront, you will configure it to only allow connections via CloudFront and no direct-access to Origin ( for example ALB).

已回答 2 年前
  • We are not using AWS CloudFront Distribution service, any other option ?

0

There are 3 ways to block traffic by Geo, these can be used for public facing endpoints such as Elastic Load Balancers:

  1. Using CloudFront Distributions: https://repost.aws/knowledge-center/cloudfront-geo-restriction
  2. Using AWS WAF: https://repost.aws/knowledge-center/waf-allow-block-country-geolocation
  3. Using Route53: Not blocking but redirect users outside of the approved Geos to a different endpoint with either an error or no reply.

If these solutions are not applicable can you provide extra details about your use case, like the services you want to restrict, which will help people answer.

AWS
Rob
已回答 2 年前
profile pictureAWS
专家
已审核 2 年前

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

回答问题的准则