This is a sub-article. To go back to the main article, click here.
To make sure only Cloudflare-owned IP addresses can access your AWS instance:
- Go to ec2 -> Security Groups (or click this link) -> Create Security Group
- In "inbound" click add rule.
- Set HTTPS as the type (or custom TCP if you want to use another port)
- For the "source", enter the following string.
Cloudflare may have added new IP ranges since this blog post, so make sure to check at https://cloudflare.com/ips.