Amazon Web Services (AWS) publishes its current IP address ranges in JSON format. To view
the current ranges, download the .json
file. To maintain history, save
successive versions of the .json
file on your system. To determine
whether there have been changes since the last time that you saved the file, check the
publication time in the current file and compare it to the publication time in the last file
that you saved.
Download ip-ranges.json.
If you access this file programmatically, it is your responsibility to ensure that the application downloads the file only after successfully verifying the TLS certificate presented by the server.
The syntax of ip-ranges.json
is as follows.
{ "syncToken": "0123456789
", "createDate": "yyyy
-mm
-dd
-hh
-mm
-ss
", "prefixes": [ { "ip_prefix": "cidr
", "region": "region
", "service": "subset
" } ] }
The publication time, in Unix epoch time format.
Type: String
Example: "syncToken": "1416435608"
The publication date and time.
Type: String
Example: "createDate": "2014-11-19-23-29-02"
The IP prefixes.
Type: Array
The public IP address range, in CIDR notation.
Type: String
Example: "ip_prefix": "198.51.100.2/24"
The AWS region or GLOBAL
for edge locations. Note that the
CLOUDFRONT
and ROUTE53
ranges are GLOBAL
.
Type: String
Valid values: ap-northeast-1
| ap-southeast-1
| ap-southeast-2
|
cn-north-1
|
eu-central-1
| eu-west-1
| sa-east-1
| us-east-1
|
us-gov-west-1
|
us-west-1
| us-west-2
|
GLOBAL
Example: "region": "us-east-1"
The subset of IP address ranges. Specify AMAZON
to get all IP address ranges
(for example, the ranges in the EC2
subset are also in the AMAZON
subset).
Note that some IP address ranges are only in the AMAZON
subset.
Type: String
Valid values: AMAZON
| EC2
| CLOUDFRONT
| ROUTE53
|
ROUTE53_HEALTHCHECKS
Example: "service": "AMAZON"