Amazon Web Services publishes 17,794 IP ranges.
Short answer
Amazon Web Services publishes every public address range it uses in ip-ranges.json, tagged by region and by service (EC2, CloudFront, S3, Route 53 health checks and more). The AMAZON service covers all of them; the other tags are subsets.
What it’s for
Use it to allow AWS services through a firewall, to recognise traffic from EC2 servers (including VPNs and bots hosted there), or to check that a request really came from CloudFront.
Sub-lists
AMAZON · 9384EC2 · 4492S3 · 1146ROUTE53_RESOLVER · 638IVS_REALTIME · 254CLOUDFRONT · 251API_GATEWAY · 216EFS · 195GLOBALACCELERATOR · 180WORKSPACES_GATEWAYS · 116EBS · 105KINESIS_VIDEO_STREAMS · 105DYNAMODB · 96CLOUDFRONT_ORIGIN_FACING · 87EC2_INSTANCE_CONNECT · 74CODEBUILD · 61MEDIA_PACKAGE_V2 · 60ROUTE53_HEALTHCHECKS · 57AMAZON_APPFLOW · 48CLOUD9 · 44AURORA_DSQL · 42ROUTE53 · 40ROUTE53_HEALTHCHECKS_PUBLISHING · 39AMAZON_CONNECT · 36CHIME_VOICECONNECTOR · 24CHIME_MEETINGS · 2IVS_LOW_LATENCY · 2
Sub-lists with a written explanation are described on their own page.
Prefixes
What changed
- 6 Nov 2026
+ 13.166.0.0/15 + 2600:f0fb:c900:9000::/52 + 2600:f0fb:c900:9000::/52 + 2600:f0fb:ca00:5000::/52 + 2600:f0fb:ca00:5000::/52 + 2606:7b40:1b0c:400::/56 + 2606:7b40:1b0c:400::/56 + 2606:7b40:1b0f:8200::/56 + 2606:7b40:1b0f:8200::/56 + 2a01:578:0:7b00::/56
- 5 Nov 2026
+ 1.178.86.0/24 + 1.178.86.0/24 + 71.137.22.0/23 + 71.137.24.0/23 + 71.137.26.0/23 + 71.137.28.0/23
- 4 Nov 2026
+ 13.217.76.0/23 + 173.83.239.0/24 + 173.83.239.0/24 + 173.83.240.0/24 + 173.83.240.0/24 + 2600:1f15:2000::/36 + 2600:1f15:2000::/36 + 2600:1f19:2000::/36 + 2600:1f19:2000::/36 + 2600:f0f0:9::/48 + 2600:f0f0:9::/48 + 2600:f0f3:f010:b00::/56 + 2600:f0f3:f010:b00::/56 + 32.201.88.0/23 + 35.54.16.0/20 + 75.47.128.0/18 + 75.47.128.0/18 + 76.197.128.0/18 + 76.197.128.0/18 − 35.54.16.0/20
- 3 Nov 2026
+ 40.163.1.0/24 + 40.163.1.0/24 + 40.163.2.0/24 + 40.163.2.0/24 + 40.163.3.0/24 + 40.163.3.0/24 − 1.178.86.0/24 − 1.178.86.0/24
- 2 Nov 2026
+ 1.178.86.0/24 + 1.178.86.0/24
- 31 Oct 2026
+ 13.251.113.64/26 + 13.251.116.0/23 + 18.143.204.64/26 + 2001:3fc1:4000::/36 + 2001:3fc1:4000::/36 + 2600:f0f0:4300::/46 + 2600:f0f0:4300::/46 + 2600:f0f0:4304::/46 + 2600:f0f0:4304::/46 + 2600:f0f0:4308::/46 + 2600:f0f0:4308::/46 + 2600:f0f0:430c::/46 + 2600:f0f0:430c::/46 + 2600:f0f0:4310::/46
Allowlist formats
nginx (first 5 prefixes)
allow 1.178.1.0/24; allow 1.178.1.0/24; allow 1.178.10.0/24; allow 1.178.10.0/24; allow 1.178.10.0/24; deny all;
iptables (first 5 prefixes)
iptables -A INPUT -s 1.178.1.0/24 -j ACCEPT iptables -A INPUT -s 1.178.1.0/24 -j ACCEPT iptables -A INPUT -s 1.178.10.0/24 -j ACCEPT iptables -A INPUT -s 1.178.10.0/24 -j ACCEPT iptables -A INPUT -s 1.178.10.0/24 -j ACCEPT
Generate the full list from the CSV, and refresh it on a schedule: providers add and retire prefixes often.
Sources
- Amazon Web Services: published IP ranges · checked 6 Nov 2026
- Amazon Web Services documentation