On this page

Show all

Help Center/ VPC Endpoint/ User Guide/ VPC Endpoints/ Configuring Access Control for an Interface VPC Endpoint

Configuring Access Control for an Interface VPC Endpoint

Updated on 2024-12-11 GMT+08:00

View PDF

Scenarios

To control IP addresses and CIDR blocks that can access a VPC endpoint, configure a whitelist. You can add or delete a whitelist record, or disable access control if you no longer need it.

For details about how to configure access control and whitelist when you are buying a VPC endpoint, see Buying a VPC Endpoint.

This section describes how to enable and configure access control after a VPC endpoint is purchased.

Constraints

Access Control is only available for VPC endpoints for connecting to interface VPC endpoint services.
If Access Control is disabled, any IP address can access the VPC endpoint.
A maximum of 20 whitelist records can be added.

Enable Access Control and Add a Whitelist Record

Go to the VPC endpoint list page.

In the VPC endpoint list, locate the VPC endpoint and click its ID.
On the displayed page, click the Access Control tab.
On the Access Control tab, click Add to Whitelist.
Enter the authorized IP addresses or CIDR blocks.
NOTE:

A maximum of 20 whitelist records can be added for each VPC endpoint.

The asterisk (*) indicates all IP addresses or CIDR blocks can access the VPC endpoint. The current account is added to the whitelist by default.
Click OK.

Delete a Whitelist Record

Go to the VPC endpoint list page.

In the VPC endpoint list, locate the VPC endpoint and click its ID.
Select the Access Control tab.
In the whitelist, locate the IP address or CIDR block and click Delete in the Operation column.
To delete whitelist records, select all the target IP addresses or CIDR blocks and click Delete in the upper left corner.
In the displayed Delete from Whitelist dialog box, click OK.