Access Control for WAF in OCI aka Oracle Cloud Infrastructure

 In my last post https://samappsdba.blogspot.com/2023/01/web-application-firewall-as-reverse-proxy-server-oci.html, we have seen how we can setup the WAF in OCI. In this post, we will see how we can setup access control for WAF in OCI. 

What are access Controls:-Describes the conditions for an access rule used with a WAF policy.As a WAF administrator, you can define explicit actions for requests that meet various conditions. Conditions use various operations. A rule action can be set to allow, check, and return HTTP response for all matched requests.

In this post, i have tried to simulate a scenario, wherein if the requests are coming from Region India, it will not allow it.

Publish the changes. Now if I try to login

In the log, I can see that it has been blocked

Now, for the same region, how to allow a single IP address.

Conditions will be:-

Save the changes and publish it. Publishing the changes takes around 10 mins of time.

There it is

 

I can access the site now

I hope this post will help someone. Till then keep learning cloud.

Reference:-https://docs.oracle.com/en-us/iaas/Content/WAF/AccessControl/access_control_management.htm