Cloudera Docs

Limiting Incoming Endpoint Traffic for Cloudera Data Engineering Services For AWS

You can limit incoming endpoint traffic for a Cloudera Data Engineering service.

  1. Note the Cloudera Data Engineering service ID, which you can obtain from the URL in the Cloudera Data Engineering Management Console when the service is highlighted:
  2. Go to the AWS console for the account where the Cloudera Data Engineering service is enabled.
  3. Navigate to EC2 -> Load Balancers in the AWS console and enter the following filter: 
     tag:cde-cluster-id : <id_from_step_1>
, e.g. tag:cde-cluster-id : cluster-cn92cs9g
  4. Select the Load Balancer instance and then under the Description tab in the Detail window, click on the link to the Source Security Group.
  5. In the subsequent view, select the correct security group ID.
  6. In the subsequent window, click Edit inbound rules.
  7. Modify the "0.0.0.0/0" CIDR ranges for the HTTPS rule to your desired CIDR ranges.
    Add additional ranges and rules as required but note that HTTPS traffic must be enabled for each range. The HTTP (port 80) and ICMP rules can be removed.