software.amazon.awssdk.core.auth.policy.conditions

Class IpAddressCondition

java.lang.Object

software.amazon.awssdk.core.auth.policy.Condition

software.amazon.awssdk.core.auth.policy.conditions.IpAddressCondition

public class IpAddressCondition
extends Condition

AWS access control policy condition that allows an access control statement to be conditionally applied based on the comparison of the the incoming source IP address at the time of a request against a CIDR IP range.

For more information about CIDR IP ranges, see http://en.wikipedia.org/wiki/CIDR_notation

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	IpAddressCondition.IpAddressComparisonType Enumeration of the supported ways an IP address comparison can be evaluated.

Constructor Summary

Constructors

Constructor and Description
IpAddressCondition(IpAddressCondition.IpAddressComparisonType type, String ipAddressRange) Constructs a new access policy condition that compares the source IP address of the incoming request to an AWS service against the specified CIDR range.
IpAddressCondition(String ipAddressRange) Constructs a new access policy condition that compares the source IP address of the incoming request to an AWS service against the specified CIDR range.

Method Summary

Methods inherited from class software.amazon.awssdk.core.auth.policy.Condition

getConditionKey, getType, getValues, setConditionKey, setType, setValues, withConditionKey, withType, withValues, withValues

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

IpAddressCondition

public IpAddressCondition(String ipAddressRange)

Constructs a new access policy condition that compares the source IP address of the incoming request to an AWS service against the specified CIDR range. The condition evaluates to true (meaning the policy statement containing it will be applied) if the incoming source IP address is within that range.

To achieve the opposite effect (i.e. cause the condition to evaluate to true when the incoming source IP is not in the specified CIDR range) use the alternate constructor form and specify IpAddressCondition.IpAddressComparisonType.NotIpAddress

For more information about CIDR IP ranges, see http://en.wikipedia.org/wiki/CIDR_notation

Parameters:

ipAddressRange - The CIDR IP range involved in the policy condition.

IpAddressCondition

public IpAddressCondition(IpAddressCondition.IpAddressComparisonType type,
                          String ipAddressRange)

Constructs a new access policy condition that compares the source IP address of the incoming request to an AWS service against the specified CIDR range. When the condition evaluates to true (i.e. when the incoming source IP address is within the CIDR range or not) depends on the specified IpAddressCondition.IpAddressComparisonType.

For more information about CIDR IP ranges, see http://en.wikipedia.org/wiki/CIDR_notation

Parameters:

type - The type of comparison to to perform.

ipAddressRange - The CIDR IP range involved in the policy condition.