Amazon Web Services (AWS) publishes its current IP address ranges in JSON format. To view
the current ranges, download the .json file. To maintain history, save
successive versions of the .json file on your system. To determine
whether there have been changes since the last time that you saved the file, check the
publication time in the current file and compare it to the publication time in the last file
that you saved.
Download ip-ranges.json.
If you access this file programmatically, it is your responsibility to ensure that the application downloads the file only after successfully verifying the TLS certificate presented by the server.
The syntax of ip-ranges.json is as follows.
{
"syncToken": "0123456789",
"createDate": "yyyy-mm-dd-hh-mm-ss",
"prefixes": [
{
"ip_prefix": "cidr",
"region": "region",
"service": "subset"
}
]
}The publication time, in Unix epoch time format.
Type: String
Example: "syncToken": "1416435608"
The publication date and time.
Type: String
Example: "createDate": "2014-11-19-23-29-02"
The IP prefixes.
Type: Array
The public IP address range, in CIDR notation.
Type: String
Example: "ip_prefix": "198.51.100.2/24"
The AWS region or GLOBAL for edge locations. Note that the
CLOUDFRONT and ROUTE53 ranges are GLOBAL.
Type: String
Valid values: ap-northeast-1 | ap-southeast-1 | ap-southeast-2 |
cn-north-1 |
eu-central-1 | eu-west-1 | sa-east-1 | us-east-1 |
us-gov-west-1 |
us-west-1 | us-west-2 |
GLOBAL
Example: "region": "us-east-1"
The subset of IP address ranges. Specify AMAZON to get all IP address ranges
(for example, the ranges in the EC2 subset are also in the AMAZON subset).
Note that some IP address ranges are only in the AMAZON subset.
Type: String
Valid values: AMAZON | EC2 | CLOUDFRONT | ROUTE53 |
ROUTE53_HEALTHCHECKS
Example: "service": "AMAZON"