# Modify the allowed and denied IP sets (optional)
<a name="modify-the-allowed-and-denied-ip-sets-optional"></a>

After deploying this solution’s CloudFormation stack, you can manually modify the allowed and denied IP sets to add or remove IP addresses as necessary.

1. Sign in to the [AWS WAF console](https://console.aws.amazon.com/wafv2/).

1. In the left navigation pane, choose **IP Sets**.

1. Choose **IP set for Allowed List** and add IP addresses from trusted sources.

1. Choose **IP set for Denied List** and add IP addresses you want to block.