Amazon VPC IPAM now supports policies to enforce IP allocation strategy

Amazon VPC IPAM Policy Updates

Amazon Virtual Private Cloud (VPC) IP Address Manager (IPAM) now supports policies to centrally configure and enforce your desired IP allocation strategy. This ensures resources launch with public IPv4 addresses from specific IPAM pools, improving operational posture, and simplifying network and security management.

Using IPAM policies, the IP administrator can centrally define public IP allocation rules for AWS resources, such as Network Address Translation (NAT) Gateways and Elastic IP addresses. The IP allocation policy configured centrally cannot be superseded by individual application teams, ensuring compliance at all times.

What to do

• Add IP based filters in your networking and security constructs like access control lists, route tables, security groups, and firewalls.
• Ensure public IPv4 addresses assignments to AWS resources always come from specific IPAM pools.

The feature is available in all AWS commercial regions and the AWS GovCloud (US) Regions, in both Free Tier and Advanced Tier of VPC IPAM. When used with the Advanced Tier of VPC IPAM, customers can set policies across AWS accounts and AWS regions.

Source: AWS release notes

If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.