./knowledge-base/cdk/lib/allowed-ips.ts

/**
 * 許可 IP アドレスリスト（一元管理）
 *
 * このファイルのみを編集することで、以下の全リソースへ一括反映される：
 *   - CloudFront WAF WebACL (CLOUDFRONT scope / us-east-1)
 *   - API Gateway リソースポリシー (基本機能 API)
 *   - AppRunner WAF WebACL (REGIONAL scope / ap-northeast-1)
 *
 * ⚠️ IPアドレスを追加・変更する場合は必ずこのファイルのみを編集し、
 *    CDK デプロイ（cdk deploy --all）を実行すること。
 */
export const ALLOWED_IPS: string[] = [
  // NHK社内ネットワーク
  "133.127.0.0/16",
  // 固定IP
  "118.238.211.181/32",
  "125.196.69.242/32",
  // 相澤自宅IP
  "60.149.128.14/32",
  // 追加許可IP
  "113.40.12.33/32",
  // リモートアクセスIP（remoteaccess-ip.txt）
  "57.140.67.150/32",
  "74.221.142.74/32",
  "74.221.142.75/32",
  "128.77.104.26/32",
  "128.77.104.27/32",
  "128.77.11.47/32",
  "128.77.11.48/32",
  "128.77.123.6/32",
  "128.77.123.7/32",
  "128.77.19.116/32",
  "128.77.19.117/32",
  "128.77.24.92/32",
  "128.77.24.93/32",
  "128.77.28.39/32",
  "128.77.28.40/32",
  "128.77.33.164/32",
  "128.77.33.165/32",
  "128.77.34.91/32",
  "128.77.34.92/32",
  "128.77.4.38/32",
  "128.77.4.41/32",
  "128.77.43.94/32",
  "128.77.43.95/32",
  "128.77.46.18/32",
  "128.77.46.19/32",
  "128.77.47.227/32",
  "128.77.47.228/32",
  "128.77.47.229/32",
  "128.77.47.230/32",
  "128.77.47.231/32",
  "128.77.47.232/32",
  "128.77.51.148/32",
  "128.77.51.149/32",
  "128.77.54.162/32",
  "128.77.54.163/32",
  "128.77.54.214/32",
  "128.77.54.215/32",
  "128.77.62.30/32",
  "128.77.62.31/32",
  "128.77.7.166/32",
  "128.77.7.167/32",
  "128.77.77.170/32",
  "128.77.77.171/32",
  "134.238.4.49/32",
  "134.238.5.253/32",
  "134.238.5.39/32",
  "137.83.216.198/32",
  "137.83.216.212/32",
  "137.83.223.176/32",
  "137.83.223.218/32",
  "140.209.219.244/32",
  "140.209.219.245/32",
  "140.209.234.250/32",
  "140.209.234.251/32",
  "140.209.234.252/32",
  "140.209.234.253/32",
  "140.209.234.254/32",
  "140.209.234.255/32",
  "165.85.0.0/32",
  "165.85.124.110/32",
  "165.85.124.9/32",
  "165.85.125.169/32",
  "165.85.125.170/32",
  "165.85.126.140/32",
  "165.85.126.141/32",
  "165.85.203.25/32",
  "165.85.203.26/32",
  "165.85.218.106/32",
  "165.85.218.11/32",
  "165.85.235.119/32",
  "165.85.235.12/32",
  "165.85.71.97/32",
  "165.85.71.98/32",
  "208.127.122.227/32",
  "208.127.122.46/32",
  "208.127.173.43/32",
  "208.127.173.44/32",
];