What are the limits of wildcards in the egress filtering tool? Can it be used in the middle of a URL or just at the end? For example, is this legal and does it work like you would expect?
ecr.*.amazonaws.com
or is that just the equivalent of:
*.amazonaws.com
Also, are these two identical or different?
*.ecr.amazonaws.com
ecr.amazonaws.com
Thanks,
Charles Wise
Best answer by Tomasz_aviatrix
Charles Wise I just ran a quick test with the following rule in my Blacklist:
- mail.*.com
I was unable to access mail.google.com , but I was able to access docs.google.com . Worked as you'd expect.
Regarding the second question, these two rules are different.
ecr.amazonaws.com - will only apply to ecr.amazonaws.com (www.ecr.amazonaws.com )
*.ecr.amazonaws.com - will not apply to ecr.amazonaws.com (www.ecr.amazonaws.com ), but it will apply to something like api .ecr.amazonaws.com
Hope this helps