As an admin, I want access to buckets to be restricted by subnet

[jordanpadams]

Checked for duplicates

Yes - I've already checked

🧑‍🔬 User Persona(s)

Cloud Admin / Operator

💪 Motivation

...so that I can add another layer of security to access to S3 buckets

📖 Additional Details

No response

Acceptance Criteria

Given a bucket that I have write access policy to a bucket with data upload manager, and within a set IP subnet
When I perform a DUM load
Then I expect the data to upload successfully

Given a bucket that I have write access policy to a bucket with data upload manager, and outside the expected IP subnet
When I perform a DUM load
Then I expect the data to upload successfully

⚙️ Engineering Details

No response

[tloubrieu-jpl]

@jordanpadams, @collinss-jpl, @sjoshi-jpl , I missed most of the SAs discussion, but I was thinking the set of authirzed IP could be the same for multiple applications (harvest, dum...). Could we configure that where it is shared by these applications ? I am thinking of some kind of VPN which would include the nodes IPs.