Skip to content

IP Whitelisting

Overview

IP whitelisting is the highest-volume daily task in RaaS operations. Customers request IPs to be added to or removed from security groups / NACLs to allow connectivity to/from their Rhapsody instances.

Runbook: Add IP Whitelist Entry

When to use: Customer raises a Jira OPS ticket requesting an IP to be whitelisted.

Prerequisites:

  • Access to the correct AWS account (via SSO)
  • The customer's IP(s) and the port/protocol to allow
  • Confirmation from the customer or account owner that the change is approved

Steps:

  1. Log in to the AWS Console for the customer's account via SSO
  2. Go to EC2 → Security Groups
  3. Find the security group attached to the customer's Rhapsody instance (typically named raas-rhapsody-sg or similar)
  4. Add an inbound rule: Custom TCP, port as requested, source = customer IP/CIDR, description = Jira ticket reference
  5. Comment on the Jira ticket confirming the change is live

Verification:

  • Ask the customer to confirm connectivity after the change
  • Or use nc -zv <rhapsody-ip> <port> from the customer's network to validate

Rollback: Remove the added security group rule and comment on the Jira ticket.

Escalation: Lee