I created one webapi application which includes few modules like account, user etc and overall includes 10 or more endpoints.

I deployed this in EC2 instances and configured in application load balancer with domain in cloud front. The authentication used is oauth2 (bearer token)

All working fine and can access using domain address and load balancer address. As this can access from anywhere and can register to the application using register API. So how can I restrict this.

How can I restrict this public access? Which is the standard practice for this deployment?

  • Do you mean like with a firewall? – Ewan Mar 31 '19 at 8:57
  • what kind of restrictions are you looking for? Restrictions on who can access the service, restrictions on who can sign-up, something else? – Bart van Ingen Schenau Mar 31 '19 at 9:28
  • Basically I don't want any public to access this endpoints. Only my clients can use these endpoints and register as a user and can use by getting token – Akhil Mar 31 '19 at 9:31
  • Take an example the API can access by www.myhost.com/api/register. Only clients which we allowed only can use these APIs to register as a user. No one can use this. – Akhil Mar 31 '19 at 9:32

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.