Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Check for Source IP/CIDR in Policies

See original GitHub issue

It’s possible to allow access based on aws:SourceIpkeyword [1].

The task is to detect that and try to correlate VPC with VPC’s subnet. Sine there is no 100% guarantee the correlation will be correct, an information about similarity must be displayed, if potential subnets are detected within account.

Refs [1] https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-sourceip

Issue Analytics

State:
Created 3 years ago
Comments:16 (16 by maintainers)

Top GitHub Comments

1reaction

leandrodamascenacommented, May 6, 2020

Try now… script will show exceptions when check if a ip is inside a subnet…

0reactions

leandrodamascenacommented, May 11, 2020

Included in 0.5.0 release.

Top Results From Across the Web

AWS: Denies access to AWS based on the source IP

The policy does not deny requests made by AWS services using the principal's credentials. This policy defines permissions for programmatic and console access....

CIDR to IPv4 Address Range Utility Tool

Free IP address tool to translate IPv4 address range into CIDR (Classless Inter-Domain Routing) format and vice-versa.

Specifying source IP addresses and ports

Procedure ; IP Address List, Applies the rule to specific IP addresses ; Network Address/#Network Bits (CIDR), Applies the rule to a block...

Understanding IP Addresses, Subnets, and CIDR Notation ...

IP addresses, networks, submasks, and CIDR notation can be difficult concepts to understand. In this guide, we will cover some of the ideas ......

Using the location condition in a Conditional Access policy

Some IP addresses aren't mapped to a specific country or region, including all IPv6 addresses. To capture these IP locations, check the box...