Allow IP Sets in AWS WAF | Network Security | Zarthi

An IP Set in AWS WAF is a reusable collection of IP addresses and CIDR ranges that you can reference inside Web ACL rules. Instead of hardcoding IPs directly into a rule, you define the set once and reference it wherever needed. This matters operationally — when an IP changes, you update the set in one place rather than hunting through rules.

AWS WAF supports both IPv4 and IPv6, but a single IP Set can only contain one type. If you need to whitelist both, you'll need two separate IP Sets and two rules.

An IP Set in AWS WAF is a collection of:

IPv4 addresses
IPv6 addresses
CIDR ranges
These IP sets can be referenced in WAF rules to:

Allow trusted traffic
Restrict unauthorized users
Control application access
Key Features of AWS WAF Allow IP Sets
Centralized IP management
IPv4 and IPv6 support
Custom allow-list rules
Easy integration with AWS services
Scalable rule management
Real-time traffic filtering
FOR MORE INFORMATION CONNECT WITH ZARTHI:
https://zarthi.com/microservices/allow-ip-sets-in-aws-waf