Managing the API Firewall

Your Amplify database is protected by a firewall unique to your instance. By default, your database is completely isolated from the internet. The firewall does not allow any public internet access. To be able to connect to the Amplify Data API, the firewall needs to be adjusted to allow your users access. 

The Firewall & API tab in the Administration section will allow you to configure your firewall so as to allow specific IP addresses in the firewall.

This page displays all firewall rules for your instance. You can modify or remove rules that are no longer valid.

This article describes how to:

• use the "Quick Add" button to add your own IP address to the firewall
• add a rule by providing the start and end address points for a range
• create API users

Adding your IP Address 

To add an IP Address quickly in your firewall:

1. Click on Quick Add My IP Address.
   
2. This will display a form.
   
   
   
3. The Name field will be auto-populated with a name, but you can enter the name you'd like to use to describe and distinguish the database-level firewall setting. Ensure that the rule name is unique.
4. The IP address field will automatically fill with your current IP address. You can enter any IP address that you want to allow access to.
5. Click Save.

Adding a Range of Addresses

If it is a range that you want to add, click on the New rule button.

Amplify will check if the rule name has to be unique and the IP format valid. If the rule was not created for some reason, you'd see an error message.

Once you have successfully created a firewall rule, it will be listed under the Firewall section. Your next step would be to set up a reporting API user.