https://github.com/pmuller/puppet-aws_firewall
Granular IP filtering for Amazon Web Services
https://github.com/pmuller/puppet-aws_firewall
Last synced: 9 months ago
JSON representation
Granular IP filtering for Amazon Web Services
- Host: GitHub
- URL: https://github.com/pmuller/puppet-aws_firewall
- Owner: pmuller
- Archived: true
- Created: 2018-03-05T07:51:46.000Z (over 8 years ago)
- Default Branch: develop
- Last Pushed: 2020-11-13T08:50:50.000Z (over 5 years ago)
- Last Synced: 2025-09-20T21:28:54.880Z (10 months ago)
- Language: Ruby
- Homepage:
- Size: 78.1 KB
- Stars: 0
- Watchers: 2
- Forks: 2
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
Awesome Lists containing this project
README
# aws_firewall
[](https://forge.puppetlabs.com/pmuller/aws_firewall)
[](https://forge.puppetlabs.com/pmuller/aws_firewall)
[](https://travis-ci.org/pmuller/puppet-aws_firewall)
#### Table of Contents
1. [Description](#description)
2. [Usage - Configuration options and additional functionality](#usage)
3. [Reference - An under-the-hood peek at what the module is doing and how](#reference)
4. [Limitations - OS compatibility, etc.](#limitations)
5. [Development - Guide for contributing to the module](#development)
6. [Changelog](#changelog)
## Description
This module generates granular iptables rules to restrict access to Amazon Web Services.
## Usage
### Create an ipset that contains specific AWS IP prefixes
```puppet
aws_firewall::ipset { 'ap-south-1-s3':
regions => ['ap-south-1'],
services => ['S3'],
}
```
### Create an ipset-based iptables rule
```puppet
aws_firewall::rule::ipset { '200 Allow access to S3 in us-east-1':
ipset => 'ap-south-1-s3',
}
```
### Create an iptables rule to allow access to EC2 metadata
```puppet
aws_firewall::rule::metadata { '200 Allow access to EC2 instance metadata':
uid => 'someone',
}
```
## Reference
See [reference](https://github.com/pmuller/puppet-aws_firewall/blob/master/doc/reference.md)
## Limitations
* Only tested on RedHat-like Linux distributions
* IPv6 prefixes are not yet supported
## Development
See [development](https://github.com/pmuller/puppet-aws_firewall/blob/master/doc/development.md)
## Changelog
See [CHANGELOG](https://github.com/pmuller/puppet-aws_firewall/blob/master/CHANGELOG.md)