0

I have a database server configured on AWS and I want to restrict access to it only from my computer's IP.

The problem is as IP addresses get assigned dynamically by the ISPs, I manually need to whitelist my IP address before accessing the server from my computer, everytime I switch from my home network to some other network.

I have been able to set a static IP address for my machine, but when I try to change my ISP from local broadband to mobile internet's hot-spot or to another network different from my broadband, the connection seems to fail. Is there any way to make my machine use the same static IP while using different ISPs ?

Subhasis Das
  • 294
  • 5
  • 15
  • 1
    No, but you could write a simple script that queries your current IP address and modifies the security group for your database to remove the old IP and insert the new IP. Run the script each time you change IPs. – jarmod Feb 26 '20 at 01:26

1 Answers1

3

Here's a script I use:

IP=`curl -s http://whatismyip.akamai.com/`
aws ec2 authorize-security-group-ingress --group-name GROUP-NAME --protocol tcp --port 22   --cidr $IP/32 --output text

In this example, it is adding my current IP address to the security group for use with SSH (port 22). You can modify it for your needs.

Please note that there is a maximum number of security group rules, so you will need to "empty it out" after you've hit the limit.

John Rotenstein
  • 241,921
  • 22
  • 380
  • 470