How to Block Access to EC2 Instance Public IP Address?

Question

I am using the Django framework on Elastic Beanstalk and I have been getting many requests from bots trying to find security vulnerabilities. The server always responds with a 400 because they access the IP address of the EC2 instance and the IP address is not in the ALLOWED_HOSTS list.

Is there a way to block access to the instance through its public IP address and only allow access to it through the domain I assigned to it?

Answer 1

Based on the comments, the solution was to setup security groups in such a way that instances only allow inbound traffict from the CLB's security group.

More about this setup can be found below:

• Configure Security Groups for Your Classic Load Balancer