Not sure what you're saying by not using "ip based access"? I've wasted 3 days on this issue and that is the only way I could find to block access to my workspace. The only other way I could have find was using private endpoint but that requires some kind of VPN that I do not want to use. All other options that I have tried resulted in failure to block public access