Use Cloud Service (like Cloud Front subnets) in security policies

giacomomarconi — Wed, 28 Apr 2021 18:07:03 GMT

I would like to use, for example, CloudFront subnets (I 've about 50 of them) in Security Policies.

Is there the way to use a single big static list without use many address objects grouped in a single address group ?

Can I use Objects > Regions ?

thanks

Re: Use Cloud Service (like Cloud Front subnets) in security policies

S.Cantwell — Wed, 05 May 2021 03:44:37 GMT

Have you looked in EDLs, otherwise known as External Dynamic Lists?

It essentially allows you to point to a flat file with IPs in them, that you can use as an Address object to block thousands of IPs at a time.