> For the complete documentation index, see [llms.txt](https://docs.rumi.systems/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.rumi.systems/rumi-cli/commands/cloud/aws/whitelist.md).

# whitelist

Open an instance's recorded proxy port(s) on its bastion's security group for the given source CIDRs.

## Syntax

```bash
rumi cloud aws whitelist \
  --profile <profile> \
  --network <network> \
  --name <instance> \
  --cidr <cidrs> \
  [options]
```

## Options

| Option      | Short | Description                                                                                                                                   | Default     |
| ----------- | ----- | --------------------------------------------------------------------------------------------------------------------------------------------- | ----------- |
| `--profile` | `-p`  | AWS profile to use                                                                                                                            | Required    |
| `--region`  | `-r`  | AWS region                                                                                                                                    | `us-east-1` |
| `--network` | `-n`  | Name of the network                                                                                                                           | Required    |
| `--name`    | `-a`  | The instance short name (e.g. w1, admin, solace) whose proxy port(s) to open                                                                  | Required    |
| `--cidr`    | `-c`  | The source CIDR(s) to allow, comma-separated (e.g. 203.0.113.4/32,198.51.100.0/24); `my-ip` = your own public IP; `0.0.0.0/0` makes it public | Required    |

## Example

```bash
rumi cloud aws whitelist \
  --profile my-aws-profile \
  --network my-network \
  --name admin \
  --cidr my-ip
```

## Notes

A launch records the instance's proxy port but does not open it. This command opens the instance's recorded public proxy port(s) on its bastion's security group for the given IPs. The ports come from the instance's `RumiProxyPort` tag.

The `my-ip` token resolves to your own public IP. Passing `0.0.0.0/0` makes the port public.

## See Also

* [unwhitelist](/rumi-cli/commands/cloud/aws/unwhitelist.md)
* [whitelist-ssh](/rumi-cli/commands/cloud/aws/whitelist-ssh.md)