Cloud Armour policy

[maheshdo]

Team,

Looking to lock down external load balancer from CDN CIDR EdgeLocation IPs.
I was able to create the policy in Cloud Armour to allow only the CIDR ranges from CDN and was able to see the the rules starting with rule number 1000 created under the policy.

Need to know is there a way in cloud armor policy that will continue to allow all the traffic , but alert when access from non CDN ip address is seen, so I can then investigate the source of access and determine if the access should be blocked or allowed.

[pfilourenco · Accepted solution]

Hi,

After enabling request-logging you can use log-based-alerts to achieve your use-case.

BR,

Pedro Lourenço