Secure API Access with IP Whitelisting
Secure connectivity for Innovapptive-hosted applications is enforced by restricting inbound traffic to trusted client IPs and permitting outbound traffic only to approved Innovapptive domains. This ensures that only authorized systems can exchange data with iMaintenance while preventing unauthorized access.
Responsibilities at a Glance
| Layer | Responsibility |
|---|---|
| WAF (Ingress) | Managed by Innovapptive using AWS WAF to allow access only from whitelisted IPs |
| Firewall (Egress) | Managed by the customer to permit outbound access to specific Innovapptive domains |
To maintain security and seamless communication between customer environments and Innovapptive’s cloud services:
-
Ingress filtering (AWS WAF): Only specific client IPs are allowed to access Innovapptive services.
-
Egress filtering (Customer Firewall): Outbound traffic is restricted to the domains required for iMaintenance functionality.
This dual-layer approach prevents unauthorized access while ensuring stable, authorized connectivity across all environments.