unwhitelist-ssh

Revoke TCP 22 (SSH) on a bastion's security group for the given source CIDRs. The inverse of whitelist-ssh.

Syntax

rumi cloud aws unwhitelist-ssh \
  --profile <profile> \
  --network <network> \
  --cidr <cidrs> \
  [options]

Options

Option	Short	Description	Default
--profile	-p	AWS profile to use	Required
--region	-r	AWS region	us-east-1
--network	-n	Name of the network	Required
--name	-b	The bastion name whose SSH to revoke; omit for the single (unnamed) bastion	none
--cidr	-c	The source CIDR(s) to revoke SSH for, comma-separated (my-ip = your own public IP)	Required

Example

rumi cloud aws unwhitelist-ssh \
  --profile my-aws-profile \
  --network my-network \
  --name ops \
  --cidr my-ip

Notes

Revokes TCP 22 on the bastion's security group for the given IPs.

See Also

• whitelist-ssh

• unwhitelist