Cloud platform · file snapshot 2026-09-21

Amazon Web Services IP ranges

The Amazon Web Services file fetched on 2026-09-21 contained 7,799 distinct IPv4 prefix strings and 3,478 IPv6 prefix strings. Inspect the source URL, recorded fields and content hash below.

IPv4
7,799
IPv6
3,478
Fetched
2026-09-21
Publisher
Amazon Web Services
Category
Cloud platform
IPv4 prefix strings
7,799
IPv6 prefix strings
3,478
Source file
https://ip-ranges.amazonaws.com/ip-ranges.json
File format
JSON
Size
2,711,949 bytes
Fetched (UTC)
SHA-256
facd6e0ac3e93a6461f543277c8b0d64c12bc1bd46c6ae1493ba55286b6f88a1
Documentation
docs.aws.amazon.com/vpc/latest/userguide/aws-ip-ranges.html

File measurement

Distinct valid prefix strings in the downloaded file. Overlapping prefixes are kept, so the count describes entries, not address-space size.
7,799
IPv4 prefix strings
3,478
IPv6 prefix strings
2,711,949
bytes
JSON
file format
Prefix count split: IPv4 69.2% / IPv6 30.8%. This compares entries, not address-space size.

Fields recorded from the file

Literal field names and values. A timestamp or counter is shown without assigning an update schedule to it.
Publisher fields
FieldValue
syncToken1790009226
createDate2026-09-21-16-47-06
service: 28 distinct recorded values
AMAZONAMAZON_APPFLOWAMAZON_CONNECTAPI_GATEWAYAURORA_DSQLCHIME_MEETINGSCHIME_VOICECONNECTORCLOUD9CLOUDFRONTCLOUDFRONT_ORIGIN_FACINGCODEBUILDDYNAMODBEBSEC2EC2_INSTANCE_CONNECTEFSGLOBALACCELERATORIOT_COREIVS_LOW_LATENCYIVS_REALTIMEKINESIS_VIDEO_STREAMSMEDIA_PACKAGE_V2ROUTE53ROUTE53_HEALTHCHECKSROUTE53_HEALTHCHECKS_PUBLISHINGROUTE53_RESOLVERS3WORKSPACES_GATEWAYS
region: 43 distinct recorded values
GLOBALaf-south-1ap-east-1ap-east-2ap-northeast-1ap-northeast-2ap-northeast-3ap-south-1ap-south-2ap-southeast-1ap-southeast-2ap-southeast-3ap-southeast-4ap-southeast-5ap-southeast-6ap-southeast-7ca-central-1ca-west-1cn-north-1cn-northwest-1eu-central-1eu-central-2eu-north-1eu-south-1eu-south-2eu-west-1eu-west-2eu-west-3eusc-de-east-1il-central-1me-central-1me-south-1me-west-1mx-central-1sa-east-1sa-west-1us-east-1us-east-2us-gov-east-1us-gov-west-1us-south-1us-west-1us-west-2

Reproduce the count

Save the linked source as provider-file, download the Python measurement script, then run it. The result includes counts, fields and a hash; a different hash means you measured different bytes. Full counting method.
Measure a saved file
python3 ip-ranges-measure.py provider-file service region

ASN reference records

Holder names were read from RIPEstat on the dates below. These are separately selected reference records, not a mapping of every prefix to its origin ASN. A listed holder may differ from the provider named on this page.
Amazon Web Services ASN records
ASNRIPEstat holderChecked
AS16509AMAZON-02 - Amazon.com, Inc.2026-09-21
AS14618AMAZON-AES - Amazon.com, Inc.2026-09-21
AS8987GOVCLOUD - Amazon2026-09-21
AS214101EU-SOVEREIGN-CLOUD Amazon Data Services European Sovereign Cloud GmbH2026-09-21
AS7224AMAZON-AS - Amazon.com, Inc.2026-09-21

Interpreting this snapshot

Where is the Amazon Web Services IP range file?
The selected snapshot was downloaded from https://ip-ranges.amazonaws.com/ip-ranges.json. The source and documentation links on this page let you inspect the publisher's current data and scope.
What does a matching prefix establish?
A match means an address falls inside a prefix in this selected file. The measurement does not establish the identity of a requester, a device location or ownership of every address. Check the publisher’s documentation before applying access rules.
How often is this file updated?
This record measures the file fetched at 2026-09-21T19:35:31.410105+00:00. Publisher fields are reproduced as recorded, without inferring a future update schedule. Download the current source and compare hashes to check for a change.

To test an address against a saved file, follow the Python cloud CIDR matching guide. Its example parses AWS JSON; adapt the parser to this publisher's schema and preserve all matching records.

Sources

A range file lists addresses the publisher attributes to its service. Matching an address against it shows only that the address falls inside a listed prefix; it does not identify the requester or the location of a device.