AWS

Retrieving AWS IP range

Posted by Kakashi on 2017-11-17

It’s a simple note that how to get notifications while AWS IP range changed

Usage

http://docs.aws.amazon.com/general/latest/gr/aws-ip-ranges.html

AWS provides the ip range file, you can download from ip-ranges.json

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
jq  '.prefixes[] | select(.region=="us-east-1")' < ipranges.json

{
  "ip_prefix": "23.20.0.0/14",
  "region": "us-east-1",
  "service": "AMAZON"
},
{
  "ip_prefix": "50.16.0.0/15",
  "region": "us-east-1",
  "service": "AMAZON"
},
{
  "ip_prefix": "50.19.0.0/16",
  "region": "us-east-1",
  "service": "AMAZON"
},
...

can use it to get specific IP range

Purpose

  • Implementing Egress Control
    allow outbound traffic to the CIDR block in the Amazon list

  • Implementing Ingress Control
    while using different cloud or different platform, we can use it to define legal traffic

AWS IP Address Ranges Notifications

strongly recommened to set this up, really helpful
http://docs.aws.amazon.com/general/latest/gr/aws-ip-ranges.html#subscribe-notifications

Keep Route53 Health check source IP’s up to date
http://johntdyer.com/aws/2015/03/16/keep-route53-healthcheck-source-ips-up-to-date.html

FEATURED TAGS
AWS
FRIENDS