> For the complete documentation index, see [llms.txt](https://docs.rumi.systems/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.rumi.systems/rumi-cli/commands/cloud/aws/unwhitelist.md).

# unwhitelist

Revoke an instance's recorded proxy port(s) on its bastion's security group for the given source CIDRs. The inverse of [whitelist](/rumi-cli/commands/cloud/aws/whitelist.md).

## Syntax

```bash
rumi cloud aws unwhitelist \
  --profile <profile> \
  --network <network> \
  --name <instance> \
  --cidr <cidrs> \
  [options]
```

## Options

| Option      | Short | Description                                                                    | Default     |
| ----------- | ----- | ------------------------------------------------------------------------------ | ----------- |
| `--profile` | `-p`  | AWS profile to use                                                             | Required    |
| `--region`  | `-r`  | AWS region                                                                     | `us-east-1` |
| `--network` | `-n`  | Name of the network                                                            | Required    |
| `--name`    | `-a`  | The instance short name (e.g. w1, admin, solace) whose proxy port(s) to revoke | Required    |
| `--cidr`    | `-c`  | The source CIDR(s) to revoke, comma-separated (`my-ip` = your own public IP)   | Required    |

## Example

```bash
rumi cloud aws unwhitelist \
  --profile my-aws-profile \
  --network my-network \
  --name admin \
  --cidr my-ip
```

## Notes

Revokes the instance's recorded public proxy port(s) on its bastion's security group for the given IPs. The ports come from the instance's `RumiProxyPort` tag.

## See Also

* [whitelist](/rumi-cli/commands/cloud/aws/whitelist.md)
* [unwhitelist-ssh](/rumi-cli/commands/cloud/aws/unwhitelist-ssh.md)