Reputation: 131
Let's say I've a private subnet with bunch of EC2 instances. These EC2 instances make API calls with external partner, say api.somevendor.com, whose IP address might/will change. How do I configure my AWS security group to communicate to only this partner host?
Upvotes: 0
Views: 2014
Reputation: 13638
You have to open the security group to the IPs and ports provided by the vendor service. They should provide you with that information, of course.
If you are concerned about what happens if the vendor later changes those IPs, you will have to change them again. Manually. It would be difficult if not impossible to script anything here.
A reputable vendor will provide you with notice of any upcoming changes to their service ips. Make sure you are on their email or technical notification list.
Upvotes: 1