我们一直在研究一个使用亚马逊网络服务,特别是SimpleDB的协作项目。最近,我们的SDB成本一直在飙升,我们正在努力弄清楚到底是怎么回事。有没有办法找出连接到它的IP地址?
编辑:如果我们找不到哪些in正在访问SDB来获取数据,是否至少可以根据一个域名的查询次数和/或从一个域名中拉出的总数据量来确定我们的每个SDB域名被查询了多少?
发布于 2013-06-04 11:38:41
AWS IAM允许您使用AWS IAM AWS-Wide Policy Keys对用户的IP地址设置条件。这是链接- For Managing Users for Amazon SimpleDB using AWS IAM。
以下是仅当请求来自特定IP地址或范围时才允许的示例。source
Allow requests only if they come from a certain IP address or range
This policy is for an IAM group that all users in a company belong to. The policy denies access to all actions in the account unless the request comes from the IP range 192.0.2.0 to 192.0.2.255 or 203.0.113.0 to 203.0.113.255. (The policy assumes the IP addresses for the company are within the specified ranges.) A typical use is for Amazon VPC, where you might expect all your users' requests to originate from a particular IP address, and so you want to deny requests from any other address.
{
"Version": "2012-10-17",
"Statement":[{
"Effect":"Deny",
"Action":"*",
"Resource":"*",
"Condition":{
"NotIpAddress":{
"aws:SourceIp":["192.0.2.0/24", "203.0.113.0/24"]
}
}
}
]
}https://stackoverflow.com/questions/16900033
复制相似问题