ACL-based access control

更新时间:
复制 MD 格式

Simple Message Queue (formerly MNS) provides access control for public endpoints to control whether clients can connect to the Simple Message Queue (formerly MNS) service. You can configure rules to deny all requests from public endpoints or allow access only from specific IP addresses.

How it works

  • Disable public access: You can disable public access and allow connections only from a Virtual Private Cloud (VPC).

  • Allow access from specific IP addresses: When public access is enabled, only IP addresses or CIDR blocks in the ip address whitelist can access the public endpoint.

Supported regions

The access control feature is currently available only in the China (Beijing), China (Shanghai), and China (Guangzhou) regions.

Add to the IP whitelist

  1. Log on to the SMQ console. In the left-side navigation pane, click Access Control.

  2. In the top navigation bar, select a region. Example: China (Beijing).

  3. On the Access Control page, on the Public Endpoint tab, click Create an IP address whitelist.

  4. In the Create an IP address whitelist panel, enter one or more IP addresses or CIDR blocks, and then click OK.

    Note

    You can add multiple IP addresses or CIDR blocks at a time. Separate them with semicolons (;) or commas (,).

View the IP whitelist

  1. On the Access Control page, click the Public Endpoint tab.

  2. The IP Address Whitelist list shows the whitelisted IP addresses for the current public endpoint.

Delete from the IP whitelist

  1. On the Access Control page, click the Public Endpoint tab.

  2. In the IP Address Whitelist list, find the target IP address or CIDR block, and then click Delete in the Action column.

  3. In the Delete IP Whitelist dialog box, click OK.

    Important

    After an IP address is removed from the ip address whitelist, the corresponding client can no longer connect to the Simple Message Queue (formerly MNS) service. Please proceed with caution.

Disable public access

  1. On the Access Control page, click the Public Endpoint tab.

  2. Turn off the Allow Access switch next to Access Control.

  3. In the Are you sure you want to deny all accesses from the public IP address? dialog box, click OK.

    Important

    After you disable public access, the system blocks all requests from public endpoints and returns an error. Proceed with caution.