Skip to content

Networking Commands

Download and query the AWS public IP range list (ip-ranges.json). Useful for building firewall allowlists and for answering "is this IP one of ours?"

Both commands read the published range file, not your account, so they need no AWS credentials.

Commands

networking ip-ranges

Download and analyze AWS IP ranges.

aws-cloud-utilities networking ip-ranges [OPTIONS]
Option Value Description
--output-file TEXT Output file for AWS IP ranges (supports .json, .yaml, .csv)
--filter-service TEXT Filter IP ranges by AWS service (e.g., EC2, S3, CLOUDFRONT)
--filter-region TEXT Filter IP ranges by AWS region (e.g., us-east-1, eu-west-1)
--ipv6 flag Include IPv6 ranges in addition to IPv4
--show-summary flag Show summary statistics of IP ranges

networking ip-summary

Show summary statistics of AWS IP ranges.

aws-cloud-utilities networking ip-summary [OPTIONS]
Option Value Description
--service TEXT Show summary for specific service only
--region TEXT Show summary for specific region only

Examples

# All ranges
aws-cloud-utilities networking ip-ranges

# Filter by service or region
aws-cloud-utilities networking ip-ranges --filter-service CLOUDFRONT
aws-cloud-utilities networking ip-ranges --filter-region us-east-1

# Both filters, including IPv6, saved to CSV
aws-cloud-utilities networking ip-ranges --filter-service EC2 --filter-region eu-west-1 \
    --ipv6 --output-file ec2-euw1-ranges.csv

# Range counts alongside the listing
aws-cloud-utilities networking ip-ranges --show-summary

# Summary statistics
aws-cloud-utilities networking ip-summary
aws-cloud-utilities networking ip-summary --service S3
aws-cloud-utilities networking ip-summary --region us-west-2

Notes

Service names in --filter-service are the uppercase identifiers AWS uses in ip-ranges.json: AMAZON, EC2, S3, CLOUDFRONT, ROUTE53, API_GATEWAY, and so on. AMAZON is a superset that overlaps the others.

AWS updates these ranges regularly. Anything you generate here is a snapshot, not a permanent answer.