IP Allowlisting Through AWS WAF

Innovapptive manages inbound access to iMaintenance services through AWS Web Application Firewall (WAF). Only customer-approved IPs are allowed, while all others are blocked

Prerequisites
  • Enable AWS WAF on the relevant AWS resource.
  • Provide a list of static public IPs or CIDRs.
  1. Create an IP Set
    1. Navigate to the AWS WAF Console → IP sets.
    2. Click Create IP set.
    3. Enter a name (e.g., WhitelistedIPs).
    4. Select the applicable Region (Global or Regional).
    5. Add the customer-provided IP addresses or CIDRs.
    6. Click Create.
  2. Create or Edit a Web ACL
    1. In the WAF Console, go to Web ACLs.
    2. Either create a new Web ACL or select an existing one.
    3. Attach the Web ACL to the required AWS resource (ALB, CloudFront, etc.).
  3. Add an Allow Rule
    1. Within the Web ACL, go to Rules → Add rule.
    2. Rule name: AllowOnlyWhitelistedIPs.
    3. Statement: Use the previously created IP set.
    4. Action: Allow
  4. Add a Block Rule
    1. Rule name: BlockAllOthers.
    2. Action: Block.
    3. Alternatively, set the Web ACL’s default action to Block.
  5. Deploy and Verify
    1. Ensure the Allow rule is listed above the Block rule in priority order.
    2. Save and deploy the Web ACL.
    3. Test access from an allowed IP (succeeds) and a non-allowed IP (blocked).