Using SourceIp in ALB Listener Rule

#aws #devops #loadbalancer #cloud

For port 443 of an ALB, it's often set public but some domains are restricted access outside of office/working network especially those one do not have login phase (it's always possible to setup this but in this case assume no), for example, grafana.dev.com, prometheus.dev.com, datadog.dev.com, etc.
To overcome this, use sourceIp in HTTPS 443 listener rule. Assume office network is 14.64.20.233/32 and 118.20.134.243/32