Event Driven Processing of ip-ranges.json

Imagine you have a security group that needs to allow all IP addresses of AWS EC2 instances. Or imagine you have to allow IP addresses of Github Actions runners so that only your CI workers connect to your VPC. Both of those IP address ranges change regularly, and need to be updated (usually by hand.)

If we want to automate these security group updates, how could you figure out when these IP address ranges have changed? AWS has an SNS …

actions address addresses aws change connect ec2 event github github actions ip address ip addresses json lambda runners security serverless vpc workers