security - How to ban IP addresses dynamically on Amazon AWS, with firewall? -


i ban ip addresses dynamically, when software detects malicious activity (hitting 10 page in row in 10 second or specific useragent or ), creates ".txt" file blacklisted ip-s.

i have 4 ways go:

  1. ban ip firewall, not reach ec2 instance, nor s3.
  2. create .htaccess rewritemap, ip list, ban them httpd.conf
  3. ban ip @ begining of php reading ip list .txt file (no need connect mysql, feel safer).
  4. ban ip @ begining of php, reading ip list mysql.

obviously, first 1 ideal, there way accomplish that? unfortunately, new amazon aws.

you use aws sdk such boto or command line tools update security groups , s3 iam policies on fly, accomplishing option #1. check out sdk docs more information.


Comments

Popular posts from this blog

linux - Does gcc have any options to add version info in ELF binary file? -

android - send complex objects as post php java -

charts - What graph/dashboard product is facebook using in Dashboard: PUE & WUE -