"In this video, John Martinez shows us how this policy only restricts connecting to resources to sanction IP addresses. 👉 What exactly does this policy do? This policy helps protect against unapproved network locations by restricting access to specific, sanctioned IP addresses. It can be further enhanced by adding other contextual attributes and additional friction, such as MFA. 👉 Why it matters Restricting access to critical resources to sanctioned IP addresses reduces the attack surface by ensuring that authorizations come from approved network locations. This restriction minimizes unauthorized access and blocks geo-distributed attacks."
This policy restricts connections to specific IP addresses.
In this case, I'm gonna connect to an SSH resource that I've already been authorized to and attempt a connection from my home IP address.
I'm denied connection because that is not my home IP address.
Let's go ahead and use my home IP address in the policy.
Retry the connection, and I am now allowed to connect.
