{
  "schema_version": 2,
  "id": "operate/rc/subscriptions/bring-your-own-cloud/subscription-whitelist",
  "title": "Configure subscription CIDR allow list",
  "url": "https://redis.io/docs/latest/operate/rc/subscriptions/bring-your-own-cloud/subscription-whitelist/",
  "summary": "The CIDR allow list permits traffic between a range of IP addresses and the Redis Cloud VPC.",
  "aliases": [
    "/operate/rc/how-to/view-edit-cloud-account/subscription-whitelist",
    "/operate/rc/cloud-accounts/subscription-whitelist",
    "/operate/rc/cloud-integrations/aws-cloud-accounts/subscription-whitelist",
    "/operate/rc/subscriptions/aws-cloud-accounts/subscription-whitelist/"
  ],
  "tags": [
    "docs",
    "operate",
    "rc"
  ],
  "last_updated": "2026-10-02T16:06:07+01:00",
  "page_type": "content",
  "content_hash": "c1a733d39fdeaf8984869ccf439a7a0afcf6e024497ae184f28b4d72070dbdef",
  "sections": [
    {
      "id": "overview",
      "title": "Overview",
      "role": "overview",
      "text": "The [CIDR](https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) [allow list](https://en.wikipedia.org/wiki/Whitelist) lets you restrict traffic to your Redis Cloud database. When you configure an allow list, only the [IP addresses](https://en.wikipedia.org/wiki/IP_address) defined in the list can connect to the database. Traffic from all other IP addresses is blocked.\n\nIf you use [Redis Cloud Bring your Own Cloud](https://redis.io/docs/latest/operate/rc/subscriptions/bring-your-own-cloud) to host your Redis Cloud deployment, you can configure a subscription-wide allow list\nto restrict traffic to all databases associated with the subscription.\n\nThe subscription CIDR allow list defines a range of IP addresses and [AWS security groups](https://docs.aws.amazon.com/managedservices/latest/userguide/about-security-groups.html) that control inbound and outbound traffic to the Redis Cloud [VPC](https://en.wikipedia.org/wiki/Virtual_private_cloud). When you add security groups to the allow list, you can also use the same security groups to manage access to your application.\n\n> [!NOTE]\n> The subscription-level allow list is available for Redis Cloud Bring your Own Cloud. If you don't have Redis Cloud Bring your Own Cloud, you can configure a [CIDR allow list](https://redis.io/docs/latest/operate/rc/security/cidr-whitelist) for each database."
    },
    {
      "id": "allow-ip-address-or-security-group",
      "title": "Allow IP address or security group",
      "role": "content",
      "text": "To add IP addresses or [AWS security groups](https://docs.aws.amazon.com/managedservices/latest/userguide/about-security-groups.html) to a subscription's allow list:\n\n1. From the [Redis Cloud console](https://cloud.redis.io/) menu, select **Subscriptions** and then select your subscription from the list.\n\n1. Select **Connectivity > Allow List**.\n\n1. If the allow list is empty, select **Add allow list**.\n\n    ![Use the Add allow list button to create an allow list.](https://redis.io/docs/latest/images/rc/button-subscription-allow-list-add.png)\n\n1. Select an entry **Type** from the list:\n\n    ![Select the type of entry to add to the allow list from the Type list. You can choose between IP address and AWS security group.](https://redis.io/docs/latest/images/rc/subscription-connectivity-allow-list-type-dropdown.png)\n\n1. In the **Value** box, enter one of these options:\n\n    - An IP address in CIDR format\n\n    - The AWS security group ID\n\n1. Select the check to add the entry to the allow list.\n\n1. To allow additional IP addresses or security groups:\n\n    1. Select **Add** to add a new entry.\n\n    ![The Add button adds new entries to the allow list.](https://redis.io/docs/latest/images/rc/icon-add.png)\n\n    1. Select the new entry's **Type**, enter the **Value**, and select the check to add it to the allow list.\n\n        ![Define the new entry and select the Submit entry button to add it to the allow list.](https://redis.io/docs/latest/images/rc/subscription-connectivity-allow-list-add-entry.png)\n    \n    You can also select the **Edit** button to change an entry or the **Delete** button to remove it.\n\n    ![The Edit button updates an entry in the allow list.](https://redis.io/docs/latest/images/rc/icon-edit.png#no-click) ![The Delete button removes an entry from the allow list.](https://redis.io/docs/latest/images/rc/icon-delete-lb.png#no-click)\n    \n1. Select **Apply all changes** to apply the allow list updates.\n\n    ![The Apply all changes button saves your allow list changes.](https://redis.io/docs/latest/images/rc/button-subscription-allow-list-apply-all.png)"
    }
  ],
  "examples": []
}