Missing IP Validation in UpdateInstanceAllowedIPs

[jmesout]

Missing IP Validation in UpdateInstanceAllowedIPs

Severity: Medium
File: instance.go
Location: Line 464

Description

The UpdateInstanceAllowedIPs() function doesn't validate input IP addresses, which could lead to API errors if invalid IPs are provided.

Suggested Fix

Add IP validation using net.ParseIP:

for _, ip := range allowedIPs {
    if net.ParseIP(ip) == nil {
        return nil, fmt.Errorf("invalid IP address: %s", ip)
    }
}

Labels: bug, enhancement