Securing Label Studio Access on EC2: Invite-Only Registration

Label Studio Support
, , ,
1

Question:

I’ve hosted Label Studio on an EC2 machine with a public IP, and I’m looking for advice on how to restrict access so that only approved users can sign up and use the interface. As of now, the link allows for unrestricted sign-ups. How can I enforce a system where only invited users can access Label Studio?

Answer:

To create an invite-only setup for your Label Studio instance, thereby enhancing its security, you’ll need to disable open sign-up but still allow registration via invitation. Here’s the method to follow:

  1. Set the environment variable LABEL_STUDIO_DISABLE_SIGNUP_WITHOUT_LINK=true when starting Label Studio. This disables the normal signup page, limiting registrations to invited users only.
  2. As an administrator, generate invitation links directly within the Label Studio interface:
  • Go to Label Studio UI.
  • Click on the hamburger icon in the top corner.
  • Select People.
  • Click + Add People to create invitation links.
  1. Share these unique invitation links with the individuals you approve for access.

By carrying out these steps, the Label Studio platform will be safeguarded against uninvited access, and you can manage user registrations more effectively.