Manage authorization rules
Use authorization rules to configure access policies that allow or deny IoT devices access to destination addresses.
Introduction to authorization rules
An authorization rule consists of a destination address type, a destination address, and an access policy. The destination address type can be a domain name or a CIDR block. The access policy can be either allow or deny. You can specify which destination addresses IoT devices are allowed or denied to access.
If the same domain name or IP address is configured for both allow and deny policies, the deny policy takes precedence. If an IP address is resolved from a domain name that is denied, the deny policy also takes precedence.
Add an authorization rule
Log on to the 5G Express Cloud Connect console.
On the Instance List page, find the target instance and click Configure Authorization Rule in the Actions column.
On the Authorization Rule tab, click Add Rule.
In the Add Rule dialog box, configure the following settings, and then click OK.
Configuration | Description |
Rule Name | Enter a name for the authorization rule. The name must be 2 to 128 characters long. It must start with a letter and can contain digits, periods (.), underscores (_), and hyphens (-). |
Objective | Configure the destination address to access.
|
Protocol Type | Configure the protocol type for the access policy.
|
Port Range | The destination port range. The value range is:
|
Action | Select an action for the access policy. Valid values are Allow and Deny.
|
Note
You can configure a wildcard domain name to match all of its subdomains.
If both a wildcard domain name (such as *.example.com) and an exact-match domain name (such as www.example.com) are configured, the rule for the exact-match domain name takes precedence.
After you configure a domain name or a wildcard domain name, the rule takes about 5 seconds to take effect the first time an IoT device accesses the domain.
Modify an authorization rule
If your access policy changes, you can modify an authorization rule, including its name, destination address, and access policy.
Log on to the 5G Express Cloud Connect console.
On the Instance List page, find the target instance and click Configure Authorization Rule in the Actions column.
On the Authorization Rule tab, find the target rule and click Edit in the Actions column.
In the Edit Rule dialog box, modify the rule, and then click OK.
Delete an authorization rule
Log on to the 5G Express Cloud Connect console.
On the Instance List page, find the target instance and click Configure Authorization Rule in the Actions column.
On the Authorization Rule tab, find the target rule and click Delete in the Actions column.
In the dialog box that appears, click OK.
References
CreateAuthorizationRule: Creates an authorization rule.
UpdateAuthorizationRuleAttribute: Updates an authorization rule.
DeleteAuthorizationRule: Deletes an authorization rule.