In order to restrict service usage when sharing a REST endpoint I'm looking for a way to control access of service based on an IP range with the ESRI web adapter. I know that this can be done with a reverse proxy but they only documentation I have found for doing this with ESRI's web adapter is cross domain restriction.
Not all of my services require the same amount of security, some are public while others are not, so the solution needs to target individual services with different security needs.
If this can't be accomplished with the above method, what is the best method for restricting service REST endpoint access. Using the ESRI server OOB users and roles restrictions does not prevent username and password sharing, when sharing url's. I have to be certain unauthorized users are unable to access specific published services.
Server is AWS based on Linux (RHEL)