Hi, When deploying with https://docs.flyte.org/en/latest/deployment/aws/opta.html#deployment-aws-opta, what's the canonical way for setting up an allowlist (list of permitted IPs/networks) for the internet-facing service, so the service isn't open for anyone on the internet?

cc @most-sunset-30029 can you help here?

more info

Basically I would like to set up a default deny rule on the load balancer, so only a given set of IP addresses/CIDRs should reach the service.

@most-sunset-30029 - @future-football-28532 wants to limit access to certain cidrs only. This can be done by modifying the security group for LB, to restrict the ranges

The opta deployment creates a network load balancer (no security groups, only limited VPC ACLs). Can this be configured in the YAML files?

I can look into this yes