Allow connection to Scripted REST API from specific IP Addresses

[Imi NOW]

Hi all,

is there a way to allow inbound connections to Scripted REST API from specific IP Addresses but not instance wide, just for scoped specific APIs?

Our current scenario has couple APIs and we need to secure them in a way to be able to allow connections from range of IP Addresses.

IP Address Access Control does not work for this case and Adaptive Authentication does not fit for this purpose, since it sets for all APIs.

Thank you!

[Randheer Singh]

REST API Access Policy plugin (com.glide.rest.policy) needs to be installed.
https://docs.servicenow.com/bundle/utah-platform-security/page/integrate/authentication/task/activat...

[Imi NOW]

Hi,

is there a way how to set up just for IP address and without activating Requires Authentication check box in Resource? Thanks.

[Imi NOW]

Thank you for suggestions. I was able to set REST API Access Policy on my personal instance for testing and it works from specific IP.

Is there a way how to use it without setting Requires authentication on resource? I mean allowing any inbound connections to API but without authentication, just from specific IP range. 

Thank you.