AWS infrastructure

Knocknoc orchestrates AWS Security Groups, which gate network access to EC2 instances and anything else a security group fronts. It is a built-in integration: the agent drives it with the AWS CLI on the agent host, authenticating as a restricted IAM user you create. The setup, the IAM policy and the knoc configuration are on AWS (EC2) Security Groups.

Other AWS services are not built in. Where you need one, a Custom script knoc runs a script you write on the agent host. AWS WAF Ipset is a worked example.

Further support for AWS services is on the roadmap. Please provide feedback if you have other requirements.