aws / amazon-ssm-agent

An agent to enable remote management of your EC2 instances, on-premises servers, or virtual machines (VMs).
https://aws.amazon.com/systems-manager/
Apache License 2.0
1.06k stars 326 forks source link

Support CIDR entries in DeniedPortForwardingRemoteIPs list #481

Open fractos opened 2 years ago

fractos commented 2 years ago

Issue #, if available: https://github.com/aws/amazon-ssm-agent/issues/480

Description of changes: This PR provides a way of defining IP address ranges in the configuration for what addresses should be forbidden to be port-forwarded. It piggy-backs on the implementation of the original list of forbidden IP addresses by checking whether an item is in CIDR format in order to perform the correct type of IP address comparison. This is completely backward-compatible. Unit tests have been updated and are passing.

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.