Struggling with AWS

[Steven Williams]

I have a few PCs that need to be secure and can only have access to certain things. We have an online application that is for corporate training and compliance videos. I have created a FMC rule that is allowing those PCs to that site using any application and it appears the site uses amazon aws and hits CDNs. How the heck are people doing this? I mean I can add a list of all AWS IPs but man that list is long and I dont know anyway to import IPs to an object group in the FMC. Ideas? Hints? Suggestions?

[balaji.bandi]

I know it was pain, we had same issue, finally we ended up adding below range (have jason format)

https://docs.aws.amazon.com/general/latest/gr/aws-ip-ranges.html

Since for us only https going out, so it was easy, in your case looks different .