Overview
IP Access Control is a security feature that enables organizations to:- Restrict access to Honeydew to specific IP addresses or ranges
- Enhance security by preventing unauthorized access from unknown locations
- Comply with corporate security policies and regulatory requirements
- Protect against potential security threats from unauthorized IP addresses
How It Works
When IP Access Control is enabled:- Access Validation: All requests to Honeydew (Honeydew Studio, JDBC proxy and API) are validated against the allowed IP addresses
- Blocked Requests: Requests from unauthorized IP addresses are automatically blocked
- Audit Trail: All access attempts (both successful and blocked) are logged for security monitoring
- Real-time Enforcement: IP restrictions are enforced immediately upon configuration
Supported Access Methods
IP Access Control applies to all methods of accessing Honeydew:- Web Application: Browser-based access to the Honeydew interface
- API Access: All API endpoints including GraphQL API
- JDBC Proxy: Connections from BI tools and other integrations
- Bots: Teams, Slack and other bot integrations
- Snowflake Native App: Access through the Snowflake Native Application
IP Address Formats
Honeydew supports the following IP address formats for access control:Single IP Addresses
IP Address Ranges (CIDR Notation)
Multiple IP Addresses/Ranges
You can specify multiple IP addresses or ranges by adding them as separate entries.Setup Instructions
To enable IP Access Control for your organization, please contact Honeydew support at support@honeydew.ai.
Prerequisites
Before setting up IP Access Control, ensure you have:- Admin Access: You must have Admin role permissions in Honeydew
- IP Address Information: Collect the IP addresses or ranges that should have access
- Network Planning: Identify all locations and services that need access to Honeydew
Configuration Steps
- Contact Support: Reach out to support@honeydew.ai to enable IP Access Control
- Provide IP Addresses: Submit the list of allowed IP addresses or ranges
- Testing Period: Work with support to test access from authorized locations
- Activation: Once testing is complete, IP Access Control is activated
Adding or Removing IP Addresses
To modify the allowed IP addresses:- Contact support@honeydew.ai with the updated list
- Include the specific IP addresses or ranges to add or remove
- Changes are typically applied within 24 hours
Common Use Cases
Corporate Office Access
Restrict access to your corporate office IP ranges:Remote Work with VPN
Allow access from your corporate VPN:Cloud Infrastructure
Allow access from cloud services and data centers:Third-Party Integrations
Allow specific IP addresses for BI tools and integrations:Integration with Other Security Features
IP Access Control works in conjunction with other Honeydew security features:Authentication Methods
- SSO: IP restrictions apply regardless of authentication method
- API Keys: API key access is also restricted by IP address
- MFA: Multi-factor authentication is still required for authorized IP addresses
Audit and Compliance
- Access Logs: All IP-based access attempts are logged
- Compliance Reports: IP access data can be included in compliance reporting
- Security Monitoring: Integrate with your existing security monitoring tools