Skip to main content

What are the limits of wildcards in the egress filtering tool? Can it be used in the middle of a URL or just at the end? For example, is this legal and does it work like you would expect?

ecr.*.amazonaws.com

or is that just the equivalent of:

*.amazonaws.com

Also, are these two identical or different?

*.ecr.amazonaws.com

ecr.amazonaws.com

Thanks,

Charles Wise

Charles Wise I just ran a quick test with the following rule in my Blacklist:

- mail.*.com

I was unable to access mail.google.com, but I was able to access docs.google.com. Worked as you'd expect.

 

Regarding the second question, these two rules are different.

ecr.amazonaws.com - will only apply to ecr.amazonaws.com (www.ecr.amazonaws.com)

*.ecr.amazonaws.com - will not apply to ecr.amazonaws.com (www.ecr.amazonaws.com), but it will apply to something like api.ecr.amazonaws.com 

 

Hope this helps