amazon web services - restrict (HTTP) access to Elasticbeanstalk only to IAM users and other EB instances -
i have eb instance behind elb : elb->eb. need restrict access eb:
1) other specific eb instances.
2) specific iam users, making signed requests outside internet.
as first case, seems work me changing default security group of elb (which grants open access internet) security group include eb instances want grant access to.
as second m planning create iam user (or group) , attach policy them e.g. "awselasticbeanstalkfullaccess" (http://docs.aws.amazon.com/elasticbeanstalk/latest/dg/awshowto.iam.managed-policies.html).
however m missing how instruct eb instance or elb accept requests specific iam users.
how sound you? there more efficient way achieve these 2 cases?
thnx
Comments
Post a Comment