Dynamically/Programmatically Authorize Inbound Traffic IP Address Access to EC2 Instance

Question

Is there a programmatic (api) method of authorizing a particular IP addresses to access a particular EC2 instance, e.g. for RDP.

This could be done by either creating a security group with the IP address and adding the security group to an instance. Or, this could be done, by adding an IP address to a particular security group.

You can do this programmatically via any of the AWS SDKs, or via the AWS CLI tool. — Mark B, Nov 14 '16 at 18:47

score 1 · Answer 1 · answered Nov 16 '16 at 15:20

Use create-security-group if a security group doesn't already exist and then authorize-security-group-ingress to add the IP address to the group. Finally, if necessary, associate the security group with the instance with modify-instance-attribute.

The APIs are similarly named and a Java example is available.

Dynamically/Programmatically Authorize Inbound Traffic IP Address Access to EC2 Instance

1 Answers1