aws-samples / aws-samples/dify-self-hosted-on-aws
bug: can't use API from workflows when IP Restriction is enabled
Open
- Dominant language
- TypeScript
- Stars
- 191
- Forks
- 54
- PR merge metrics
- No merged PRs in 30d
Description
## Summary
If IP address restrictions are enabled, the IP address of the NAT Gateway is blocked, so we cannot use APIs such as Workflows.
## Workaround
After deployment, add the IP address of the NAT Gateway to the IP allow list.
Contributor guide
Research direction
Start by locating the AWS CDK definitions for IP restrictions and the NAT Gateway, then trace how the allow list is configured after deployment. Reproduce the blocked Workflows API request with restrictions enabled; done means the NAT Gateway address is handled so the API can be used without the documented manual workaround.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws, typescript
- Domain
- cloud, networking, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 30/100