Checking how does it know existing IP and modifies with new IP

[Naveen45202]

First time when we add it creates new rule with IP in the security group, for the second time it successfully modifies the existing IP with new IP. I am wondering how does it exactly knows the existing IP address and modifies are we storing this old IP data elsewhere?

It would be helpful if you can explain me this here....

[piyushsonigra]

Hi @Naveen45202,
It uses https://checkip.amazonaws.com to get the current public IP for the user.
If you have created the rule in the security group using aws_ipadd and next time if your IP is changed then aws_ipadd matches rule configuration with existing rules in the security group and grab rule name which is same as to defined in aws_ipadd config file. Once aws_ipadd finds out the rule name then it checks the whitelisted IP in that rule and match with the current IP. If the existing whitelisted IP in the security group is different than the current Public IP, aws_ipadd will update IP in the security group rule for you.

[Naveen45202]

Great, Is there possibility of using this aws_ipadd in windows operating system if not any workaround?

[piyushsonigra]

aws_ipadd is not available to directly use in windows but you can install Ubuntu in Windows and try using in Linux bash terminal as shown here

[Naveen45202]

Can we modify multiple user rules with single config? Say we have multiple users using a security group where everyone's IP changes AWS credentails can't be provided to users so instead can we have this tool install in centralized server and through jenkins job allow user to modify their rule in security group ?

[piyushsonigra]

That kind of feature is not available right now but you can open PR to add a feature to pass public IP for the rule.

[tverkade]

I love this project, thank you! Is there a way that we can specify the public IP that's updated, though? I'm looking to update a couple of different dynamic public IPs for a few security groups, I've got dynamic DNS hostnames for them and I was hoping to find an easy way to make that work. Thanks!

[piyushsonigra]

Thanks, @tverkade for loving this project. In the next release, I would provide a feature to specify an IP that needs to be whitelisted in the security group.

[ixodie]

I'd like to see an option to add new allowed IPs versus always updating the same rule.