AWS::EC2::IPAMPool
In IPAM, a pool is a collection of contiguous IP addresses CIDRs. Pools enable you to organize your IP addresses according to your routing and security needs. For example, if you have separate routing and security needs for development and production applications, you can create a pool for each.
Syntax
To declare this entity in your AWS CloudFormation template, use the following syntax:
JSON
{ "Type" : "AWS::EC2::IPAMPool", "Properties" : { "AddressFamily" :
String
, "AllocationDefaultNetmaskLength" :Integer
, "AllocationMaxNetmaskLength" :Integer
, "AllocationMinNetmaskLength" :Integer
, "AllocationResourceTags" :[
, "AutoImport" :Tag
, ... ]Boolean
, "AwsService" :String
, "Description" :String
, "IpamScopeId" :String
, "Locale" :String
, "ProvisionedCidrs" :[ ProvisionedCidr, ... ]
, "PublicIpSource" :String
, "PubliclyAdvertisable" :Boolean
, "SourceIpamPoolId" :String
, "Tags" :[
} }Tag
, ... ]
YAML
Type: AWS::EC2::IPAMPool Properties: AddressFamily:
String
AllocationDefaultNetmaskLength:Integer
AllocationMaxNetmaskLength:Integer
AllocationMinNetmaskLength:Integer
AllocationResourceTags:-
AutoImport:Tag
Boolean
AwsService:String
Description:String
IpamScopeId:String
Locale:String
ProvisionedCidrs:- ProvisionedCidr
PublicIpSource:String
PubliclyAdvertisable:Boolean
SourceIpamPoolId:String
Tags:-
Tag
Properties
AddressFamily
-
The address family of the pool.
Required: Yes
Type: String
Allowed values:
ipv4 | ipv6
Update requires: Replacement
AllocationDefaultNetmaskLength
-
The default netmask length for allocations added to this pool. If, for example, the CIDR assigned to this pool is 10.0.0.0/8 and you enter 16 here, new allocations will default to 10.0.0.0/16.
Required: No
Type: Integer
Minimum:
0
Maximum:
128
Update requires: No interruption
AllocationMaxNetmaskLength
-
The maximum netmask length possible for CIDR allocations in this IPAM pool to be compliant. The maximum netmask length must be greater than the minimum netmask length. Possible netmask lengths for IPv4 addresses are 0 - 32. Possible netmask lengths for IPv6 addresses are 0 - 128.
Required: No
Type: Integer
Minimum:
0
Maximum:
128
Update requires: No interruption
AllocationMinNetmaskLength
-
The minimum netmask length required for CIDR allocations in this IPAM pool to be compliant. The minimum netmask length must be less than the maximum netmask length. Possible netmask lengths for IPv4 addresses are 0 - 32. Possible netmask lengths for IPv6 addresses are 0 - 128.
Required: No
Type: Integer
Minimum:
0
Maximum:
128
Update requires: No interruption
-
Tags that are required for resources that use CIDRs from this IPAM pool. Resources that do not have these tags will not be allowed to allocate space from the pool. If the resources have their tags changed after they have allocated space or if the allocation tagging requirements are changed on the pool, the resource may be marked as noncompliant.
Required: No
Type: List of
Tag
Update requires: No interruption
AutoImport
-
If selected, IPAM will continuously look for resources within the CIDR range of this pool and automatically import them as allocations into your IPAM. The CIDRs that will be allocated for these resources must not already be allocated to other resources in order for the import to succeed. IPAM will import a CIDR regardless of its compliance with the pool's allocation rules, so a resource might be imported and subsequently marked as noncompliant. If IPAM discovers multiple CIDRs that overlap, IPAM will import the largest CIDR only. If IPAM discovers multiple CIDRs with matching CIDRs, IPAM will randomly import one of them only.
A locale must be set on the pool for this feature to work.
Required: No
Type: Boolean
Update requires: No interruption
AwsService
-
Limits which service in AWS that the pool can be used in. "ec2", for example, allows users to use space for Elastic IP addresses and VPCs.
Required: No
Type: String
Allowed values:
ec2
Update requires: Replacement
Description
-
The description of the IPAM pool.
Required: No
Type: String
Update requires: No interruption
IpamScopeId
-
The ID of the scope in which you would like to create the IPAM pool.
Required: Yes
Type: String
Update requires: Replacement
Locale
-
The locale of the IPAM pool. In IPAM, the locale is the AWS Region where you want to make an IPAM pool available for allocations. Only resources in the same Region as the locale of the pool can get IP address allocations from the pool. You can only allocate a CIDR for a VPC, for example, from an IPAM pool that shares a locale with the VPC’s Region. Note that once you choose a Locale for a pool, you cannot modify it. If you choose an AWS Region for locale that has not been configured as an operating Region for the IPAM, you'll get an error.
Required: No
Type: String
Update requires: Replacement
ProvisionedCidrs
-
Information about the CIDRs provisioned to an IPAM pool.
Required: No
Type: List of ProvisionedCidr
Update requires: No interruption
PublicIpSource
-
The IP address source for pools in the public scope. Only used for provisioning IP address CIDRs to pools in the public scope. Default is
BYOIP
. For more information, see Create IPv6 pools in the Amazon VPC IPAM User Guide. By default, you can add only one Amazon-provided IPv6 CIDR block to a top-level IPv6 pool. For information on increasing the default limit, see Quotas for your IPAM in the Amazon VPC IPAM User Guide.Required: No
Type: String
Allowed values:
amazon | byoip
Update requires: Replacement
PubliclyAdvertisable
-
Determines if a pool is publicly advertisable. This option is not available for pools with AddressFamily set to
ipv4
.Required: No
Type: Boolean
Update requires: Replacement
SourceIpamPoolId
-
The ID of the source IPAM pool. You can use this option to create an IPAM pool within an existing source pool.
Required: No
Type: String
Update requires: Replacement
-
The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value. For example, to find all resources that have a tag with the key
Owner
and the valueTeamA
, specifytag:Owner
for the filter name andTeamA
for the filter value.Required: No
Type: List of
Tag
Update requires: No interruption
Return values
Ref
When you pass the logical ID of this resource to the intrinsic Ref
function, Ref
returns the IPAM pool ID.
For more information about using the Ref
function, see Ref
.
Fn::GetAtt
The Fn::GetAtt
intrinsic function returns a value for a specified attribute of this type. The following are the available attributes and sample return values.
For more information about using the Fn::GetAtt
intrinsic function, see Fn::GetAtt
.
Arn
The ARN of the IPAM pool.
IpamArn
The ARN of the IPAM.
IpamPoolId
The ID of the IPAM pool.
IpamScopeArn
The ARN of the scope of the IPAM pool.
IpamScopeType
The scope of the IPAM.
PoolDepth
The depth of pools in your IPAM pool. The pool depth quota is 10.
State
The state of the IPAM pool.
StateMessage
A message related to the failed creation of an IPAM pool.