Assign a static IP address to an AWS Application Load Balancer

Question

I have a load balancer created in my VPC with two subnets. Now I want to open a firewall rule from within my company intranet. I have no control over this firewall. But to open a rule on the firewall - the firewall team is accepting only ip addresses and not the DNS names.

But since the IP address of the load balancer keeps changing I can't give it to the firewall team. That's where I am stuck.

How can I open a firewall rule to an AWS load balancer from within my intranet?

Answer 1

You are correct that an Application Load Balancer does not provide static IP addresses.

You might be able to change to a Network Load Balancer :

Elastic Load Balancing creates a network interface for each Availability Zone you enable. Each load balancer node in the Availability Zone uses this network interface to get a static IP address . When you create an Internet-facing load balancer, you can optionally associate one Elastic IP address per subnet .

It is also possible to put a Network Load Balancer in front of an Application Load Balancer to gain the benefits of both.

See: Using static IP addresses for Application Load Balancers | AWS Networking & Content Delivery Blog