db config allow-rules set

Set the access allow rules for a database. Each flag replaces the corresponding list; a list whose flag is not provided is left unchanged.

turso db config allow-rules set <database-name> [--ip <address-or-cidr>]... [--aws-vpc <vpce-id>]...

At least one of --ip or --aws-vpc must be provided. To remove restrictions use turso db config allow-rules clear.

Flags

Flag	Description
`--ip`	IP address or CIDR block to allow. Repeatable. Replaces the current IP list.
`--aws-vpc`	AWS VPC endpoint ID (`vpce-...`) to allow. Repeatable. Replaces the current VPC list.

turso db config allow-rules set my-db --ip 203.0.113.7

turso db config allow-rules set my-db --ip 10.0.0.0/8

turso db config allow-rules set my-db --ip 203.0.113.7 --ip 10.0.0.0/8

turso db config allow-rules set my-db --aws-vpc vpce-0fe6c8807461bba49

When both lists are set, connections must satisfy both constraints.

turso db config allow-rules set my-db \
  --ip 10.0.0.0/8 \
  --aws-vpc vpce-0fe6c8807461bba49