Amazon Elastic Compute Cloud

2023/12/19 - Amazon Elastic Compute Cloud - 6 updated api methods

Changes  Provision BYOIPv4 address ranges and advertise them by specifying the network border groups option in Los Angeles, Phoenix and Dallas AWS Local Zones.

AdvertiseByoipCidr (updated) Link ¶
Changes (request, response)
Request
{'NetworkBorderGroup': 'string'}
Response
{'ByoipCidr': {'NetworkBorderGroup': 'string'}}

Advertises an IPv4 or IPv6 address range that is provisioned for use with your Amazon Web Services resources through bring your own IP addresses (BYOIP).

You can perform this operation at most once every 10 seconds, even if you specify different address ranges each time.

We recommend that you stop advertising the BYOIP CIDR from other locations when you advertise it from Amazon Web Services. To minimize down time, you can configure your Amazon Web Services resources to use an address from a BYOIP CIDR before it is advertised, and then simultaneously stop advertising it from the current location and start advertising it through Amazon Web Services.

It can take a few minutes before traffic to the specified addresses starts routing to Amazon Web Services because of BGP propagation delays.

To stop advertising the BYOIP CIDR, use WithdrawByoipCidr .

See also: AWS API Documentation

Request Syntax

client.advertise_byoip_cidr(
    Cidr='string',
    Asn='string',
    DryRun=True|False,
    NetworkBorderGroup='string'
)
type Cidr

string

param Cidr

[REQUIRED]

The address range, in CIDR notation. This must be the exact range that you provisioned. You can't advertise only a portion of the provisioned range.

type Asn

string

param Asn

The public 2-byte or 4-byte ASN that you want to advertise.

type DryRun

boolean

param DryRun

Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation . Otherwise, it is UnauthorizedOperation .

type NetworkBorderGroup

string

param NetworkBorderGroup

If you have Local Zones enabled, you can choose a network border group for Local Zones when you provision and advertise a BYOIPv4 CIDR. Choose the network border group carefully as the EIP and the Amazon Web Services resource it is associated with must reside in the same network border group.

You can provision BYOIP address ranges to and advertise them in the following Local Zone network border groups:

  • us-east-1-dfw-2

  • us-west-2-lax-1

  • us-west-2-phx-2

Note

You cannot provision or advertise BYOIPv6 address ranges in Local Zones at this time.

rtype

dict

returns

Response Syntax

{
    'ByoipCidr': {
        'Cidr': 'string',
        'Description': 'string',
        'AsnAssociations': [
            {
                'Asn': 'string',
                'Cidr': 'string',
                'StatusMessage': 'string',
                'State': 'disassociated'|'failed-disassociation'|'failed-association'|'pending-disassociation'|'pending-association'|'associated'
            },
        ],
        'StatusMessage': 'string',
        'State': 'advertised'|'deprovisioned'|'failed-deprovision'|'failed-provision'|'pending-deprovision'|'pending-provision'|'provisioned'|'provisioned-not-publicly-advertisable',
        'NetworkBorderGroup': 'string'
    }
}

Response Structure

  • (dict) --

    • ByoipCidr (dict) --

      Information about the address range.

      • Cidr (string) --

        The address range, in CIDR notation.

      • Description (string) --

        The description of the address range.

      • AsnAssociations (list) --

        The BYOIP CIDR associations with ASNs.

        • (dict) --

          An Autonomous System Number (ASN) and BYOIP CIDR association.

          • Asn (string) --

            The association's ASN.

          • Cidr (string) --

            The association's CIDR.

          • StatusMessage (string) --

            The association's status message.

          • State (string) --

            The association's state.

      • StatusMessage (string) --

        Upon success, contains the ID of the address pool. Otherwise, contains an error message.

      • State (string) --

        The state of the address pool.

      • NetworkBorderGroup (string) --

        If you have Local Zones enabled, you can choose a network border group for Local Zones when you provision and advertise a BYOIPv4 CIDR. Choose the network border group carefully as the EIP and the Amazon Web Services resource it is associated with must reside in the same network border group.

        You can provision BYOIP address ranges to and advertise them in the following Local Zone network border groups:

        • us-east-1-dfw-2

        • us-west-2-lax-1

        • us-west-2-phx-2

        Note

        You cannot provision or advertise BYOIPv6 address ranges in Local Zones at this time.

DeprovisionByoipCidr (updated) Link ¶
Changes (response)
{'ByoipCidr': {'NetworkBorderGroup': 'string'}}

Releases the specified address range that you provisioned for use with your Amazon Web Services resources through bring your own IP addresses (BYOIP) and deletes the corresponding address pool.

Before you can release an address range, you must stop advertising it using WithdrawByoipCidr and you must not have any IP addresses allocated from its address range.

See also: AWS API Documentation

Request Syntax

client.deprovision_byoip_cidr(
    Cidr='string',
    DryRun=True|False
)
type Cidr

string

param Cidr

[REQUIRED]

The address range, in CIDR notation. The prefix must be the same prefix that you specified when you provisioned the address range.

type DryRun

boolean

param DryRun

Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation . Otherwise, it is UnauthorizedOperation .

rtype

dict

returns

Response Syntax

{
    'ByoipCidr': {
        'Cidr': 'string',
        'Description': 'string',
        'AsnAssociations': [
            {
                'Asn': 'string',
                'Cidr': 'string',
                'StatusMessage': 'string',
                'State': 'disassociated'|'failed-disassociation'|'failed-association'|'pending-disassociation'|'pending-association'|'associated'
            },
        ],
        'StatusMessage': 'string',
        'State': 'advertised'|'deprovisioned'|'failed-deprovision'|'failed-provision'|'pending-deprovision'|'pending-provision'|'provisioned'|'provisioned-not-publicly-advertisable',
        'NetworkBorderGroup': 'string'
    }
}

Response Structure

  • (dict) --

    • ByoipCidr (dict) --

      Information about the address range.

      • Cidr (string) --

        The address range, in CIDR notation.

      • Description (string) --

        The description of the address range.

      • AsnAssociations (list) --

        The BYOIP CIDR associations with ASNs.

        • (dict) --

          An Autonomous System Number (ASN) and BYOIP CIDR association.

          • Asn (string) --

            The association's ASN.

          • Cidr (string) --

            The association's CIDR.

          • StatusMessage (string) --

            The association's status message.

          • State (string) --

            The association's state.

      • StatusMessage (string) --

        Upon success, contains the ID of the address pool. Otherwise, contains an error message.

      • State (string) --

        The state of the address pool.

      • NetworkBorderGroup (string) --

        If you have Local Zones enabled, you can choose a network border group for Local Zones when you provision and advertise a BYOIPv4 CIDR. Choose the network border group carefully as the EIP and the Amazon Web Services resource it is associated with must reside in the same network border group.

        You can provision BYOIP address ranges to and advertise them in the following Local Zone network border groups:

        • us-east-1-dfw-2

        • us-west-2-lax-1

        • us-west-2-phx-2

        Note

        You cannot provision or advertise BYOIPv6 address ranges in Local Zones at this time.

DescribeByoipCidrs (updated) Link ¶
Changes (response)
{'ByoipCidrs': {'NetworkBorderGroup': 'string'}}

Describes the IP address ranges that were specified in calls to ProvisionByoipCidr .

To describe the address pools that were created when you provisioned the address ranges, use DescribePublicIpv4Pools or DescribeIpv6Pools .

See also: AWS API Documentation

Request Syntax

client.describe_byoip_cidrs(
    DryRun=True|False,
    MaxResults=123,
    NextToken='string'
)
type DryRun

boolean

param DryRun

Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation . Otherwise, it is UnauthorizedOperation .

type MaxResults

integer

param MaxResults

[REQUIRED]

The maximum number of results to return with a single call. To retrieve the remaining results, make another call with the returned nextToken value.

type NextToken

string

param NextToken

The token for the next page of results.

rtype

dict

returns

Response Syntax

{
    'ByoipCidrs': [
        {
            'Cidr': 'string',
            'Description': 'string',
            'AsnAssociations': [
                {
                    'Asn': 'string',
                    'Cidr': 'string',
                    'StatusMessage': 'string',
                    'State': 'disassociated'|'failed-disassociation'|'failed-association'|'pending-disassociation'|'pending-association'|'associated'
                },
            ],
            'StatusMessage': 'string',
            'State': 'advertised'|'deprovisioned'|'failed-deprovision'|'failed-provision'|'pending-deprovision'|'pending-provision'|'provisioned'|'provisioned-not-publicly-advertisable',
            'NetworkBorderGroup': 'string'
        },
    ],
    'NextToken': 'string'
}

Response Structure

  • (dict) --

    • ByoipCidrs (list) --

      Information about your address ranges.

      • (dict) --

        Information about an address range that is provisioned for use with your Amazon Web Services resources through bring your own IP addresses (BYOIP).

        • Cidr (string) --

          The address range, in CIDR notation.

        • Description (string) --

          The description of the address range.

        • AsnAssociations (list) --

          The BYOIP CIDR associations with ASNs.

          • (dict) --

            An Autonomous System Number (ASN) and BYOIP CIDR association.

            • Asn (string) --

              The association's ASN.

            • Cidr (string) --

              The association's CIDR.

            • StatusMessage (string) --

              The association's status message.

            • State (string) --

              The association's state.

        • StatusMessage (string) --

          Upon success, contains the ID of the address pool. Otherwise, contains an error message.

        • State (string) --

          The state of the address pool.

        • NetworkBorderGroup (string) --

          If you have Local Zones enabled, you can choose a network border group for Local Zones when you provision and advertise a BYOIPv4 CIDR. Choose the network border group carefully as the EIP and the Amazon Web Services resource it is associated with must reside in the same network border group.

          You can provision BYOIP address ranges to and advertise them in the following Local Zone network border groups:

          • us-east-1-dfw-2

          • us-west-2-lax-1

          • us-west-2-phx-2

          Note

          You cannot provision or advertise BYOIPv6 address ranges in Local Zones at this time.

    • NextToken (string) --

      The token to use to retrieve the next page of results. This value is null when there are no more results to return.

MoveByoipCidrToIpam (updated) Link ¶
Changes (response)
{'ByoipCidr': {'NetworkBorderGroup': 'string'}}

Move a BYOIPv4 CIDR to IPAM from a public IPv4 pool.

If you already have a BYOIPv4 CIDR with Amazon Web Services, you can move the CIDR to IPAM from a public IPv4 pool. You cannot move an IPv6 CIDR to IPAM. If you are bringing a new IP address to Amazon Web Services for the first time, complete the steps in Tutorial: BYOIP address CIDRs to IPAM .

See also: AWS API Documentation

Request Syntax

client.move_byoip_cidr_to_ipam(
    DryRun=True|False,
    Cidr='string',
    IpamPoolId='string',
    IpamPoolOwner='string'
)
type DryRun

boolean

param DryRun

A check for whether you have the required permissions for the action without actually making the request and provides an error response. If you have the required permissions, the error response is DryRunOperation . Otherwise, it is UnauthorizedOperation .

type Cidr

string

param Cidr

[REQUIRED]

The BYOIP CIDR.

type IpamPoolId

string

param IpamPoolId

[REQUIRED]

The IPAM pool ID.

type IpamPoolOwner

string

param IpamPoolOwner

[REQUIRED]

The Amazon Web Services account ID of the owner of the IPAM pool.

rtype

dict

returns

Response Syntax

{
    'ByoipCidr': {
        'Cidr': 'string',
        'Description': 'string',
        'AsnAssociations': [
            {
                'Asn': 'string',
                'Cidr': 'string',
                'StatusMessage': 'string',
                'State': 'disassociated'|'failed-disassociation'|'failed-association'|'pending-disassociation'|'pending-association'|'associated'
            },
        ],
        'StatusMessage': 'string',
        'State': 'advertised'|'deprovisioned'|'failed-deprovision'|'failed-provision'|'pending-deprovision'|'pending-provision'|'provisioned'|'provisioned-not-publicly-advertisable',
        'NetworkBorderGroup': 'string'
    }
}

Response Structure

  • (dict) --

    • ByoipCidr (dict) --

      The BYOIP CIDR.

      • Cidr (string) --

        The address range, in CIDR notation.

      • Description (string) --

        The description of the address range.

      • AsnAssociations (list) --

        The BYOIP CIDR associations with ASNs.

        • (dict) --

          An Autonomous System Number (ASN) and BYOIP CIDR association.

          • Asn (string) --

            The association's ASN.

          • Cidr (string) --

            The association's CIDR.

          • StatusMessage (string) --

            The association's status message.

          • State (string) --

            The association's state.

      • StatusMessage (string) --

        Upon success, contains the ID of the address pool. Otherwise, contains an error message.

      • State (string) --

        The state of the address pool.

      • NetworkBorderGroup (string) --

        If you have Local Zones enabled, you can choose a network border group for Local Zones when you provision and advertise a BYOIPv4 CIDR. Choose the network border group carefully as the EIP and the Amazon Web Services resource it is associated with must reside in the same network border group.

        You can provision BYOIP address ranges to and advertise them in the following Local Zone network border groups:

        • us-east-1-dfw-2

        • us-west-2-lax-1

        • us-west-2-phx-2

        Note

        You cannot provision or advertise BYOIPv6 address ranges in Local Zones at this time.

ProvisionByoipCidr (updated) Link ¶
Changes (request, response)
Request
{'NetworkBorderGroup': 'string'}
Response
{'ByoipCidr': {'NetworkBorderGroup': 'string'}}

Provisions an IPv4 or IPv6 address range for use with your Amazon Web Services resources through bring your own IP addresses (BYOIP) and creates a corresponding address pool. After the address range is provisioned, it is ready to be advertised using AdvertiseByoipCidr .

Amazon Web Services verifies that you own the address range and are authorized to advertise it. You must ensure that the address range is registered to you and that you created an RPKI ROA to authorize Amazon ASNs 16509 and 14618 to advertise the address range. For more information, see Bring your own IP addresses (BYOIP) in the Amazon Elastic Compute Cloud User Guide .

Provisioning an address range is an asynchronous operation, so the call returns immediately, but the address range is not ready to use until its status changes from pending-provision to provisioned . To monitor the status of an address range, use DescribeByoipCidrs . To allocate an Elastic IP address from your IPv4 address pool, use AllocateAddress with either the specific address from the address pool or the ID of the address pool.

See also: AWS API Documentation

Request Syntax

client.provision_byoip_cidr(
    Cidr='string',
    CidrAuthorizationContext={
        'Message': 'string',
        'Signature': 'string'
    },
    PubliclyAdvertisable=True|False,
    Description='string',
    DryRun=True|False,
    PoolTagSpecifications=[
        {
            'ResourceType': 'capacity-reservation'|'client-vpn-endpoint'|'customer-gateway'|'carrier-gateway'|'coip-pool'|'dedicated-host'|'dhcp-options'|'egress-only-internet-gateway'|'elastic-ip'|'elastic-gpu'|'export-image-task'|'export-instance-task'|'fleet'|'fpga-image'|'host-reservation'|'image'|'import-image-task'|'import-snapshot-task'|'instance'|'instance-event-window'|'internet-gateway'|'ipam'|'ipam-pool'|'ipam-scope'|'ipv4pool-ec2'|'ipv6pool-ec2'|'key-pair'|'launch-template'|'local-gateway'|'local-gateway-route-table'|'local-gateway-virtual-interface'|'local-gateway-virtual-interface-group'|'local-gateway-route-table-vpc-association'|'local-gateway-route-table-virtual-interface-group-association'|'natgateway'|'network-acl'|'network-interface'|'network-insights-analysis'|'network-insights-path'|'network-insights-access-scope'|'network-insights-access-scope-analysis'|'placement-group'|'prefix-list'|'replace-root-volume-task'|'reserved-instances'|'route-table'|'security-group'|'security-group-rule'|'snapshot'|'spot-fleet-request'|'spot-instances-request'|'subnet'|'subnet-cidr-reservation'|'traffic-mirror-filter'|'traffic-mirror-session'|'traffic-mirror-target'|'transit-gateway'|'transit-gateway-attachment'|'transit-gateway-connect-peer'|'transit-gateway-multicast-domain'|'transit-gateway-policy-table'|'transit-gateway-route-table'|'transit-gateway-route-table-announcement'|'volume'|'vpc'|'vpc-endpoint'|'vpc-endpoint-connection'|'vpc-endpoint-service'|'vpc-endpoint-service-permission'|'vpc-peering-connection'|'vpn-connection'|'vpn-gateway'|'vpc-flow-log'|'capacity-reservation-fleet'|'traffic-mirror-filter-rule'|'vpc-endpoint-connection-device-type'|'verified-access-instance'|'verified-access-group'|'verified-access-endpoint'|'verified-access-policy'|'verified-access-trust-provider'|'vpn-connection-device-type'|'vpc-block-public-access-exclusion'|'ipam-resource-discovery'|'ipam-resource-discovery-association'|'instance-connect-endpoint',
            'Tags': [
                {
                    'Key': 'string',
                    'Value': 'string'
                },
            ]
        },
    ],
    MultiRegion=True|False,
    NetworkBorderGroup='string'
)
type Cidr

string

param Cidr

[REQUIRED]

The public IPv4 or IPv6 address range, in CIDR notation. The most specific IPv4 prefix that you can specify is /24. The most specific IPv6 prefix you can specify is /56. The address range cannot overlap with another address range that you've brought to this or another Region.

type CidrAuthorizationContext

dict

param CidrAuthorizationContext

A signed document that proves that you are authorized to bring the specified IP address range to Amazon using BYOIP.

  • Message (string) -- [REQUIRED]

    The plain-text authorization message for the prefix and account.

  • Signature (string) -- [REQUIRED]

    The signed authorization message for the prefix and account.

type PubliclyAdvertisable

boolean

param PubliclyAdvertisable

(IPv6 only) Indicate whether the address range will be publicly advertised to the internet.

Default: true

type Description

string

param Description

A description for the address range and the address pool.

type DryRun

boolean

param DryRun

Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation . Otherwise, it is UnauthorizedOperation .

type PoolTagSpecifications

list

param PoolTagSpecifications

The tags to apply to the address pool.

  • (dict) --

    The tags to apply to a resource when the resource is being created. When you specify a tag, you must specify the resource type to tag, otherwise the request will fail.

    Note

    The Valid Values lists all the resource types that can be tagged. However, the action you're using might not support tagging all of these resource types. If you try to tag a resource type that is unsupported for the action you're using, you'll get an error.

    • ResourceType (string) --

      The type of resource to tag on creation.

    • Tags (list) --

      The tags to apply to the resource.

      • (dict) --

        Describes a tag.

        • Key (string) --

          The key of the tag.

          Constraints: Tag keys are case-sensitive and accept a maximum of 127 Unicode characters. May not begin with aws: .

        • Value (string) --

          The value of the tag.

          Constraints: Tag values are case-sensitive and accept a maximum of 256 Unicode characters.

type MultiRegion

boolean

param MultiRegion

Reserved.

type NetworkBorderGroup

string

param NetworkBorderGroup

If you have Local Zones enabled, you can choose a network border group for Local Zones when you provision and advertise a BYOIPv4 CIDR. Choose the network border group carefully as the EIP and the Amazon Web Services resource it is associated with must reside in the same network border group.

You can provision BYOIP address ranges to and advertise them in the following Local Zone network border groups:

  • us-east-1-dfw-2

  • us-west-2-lax-1

  • us-west-2-phx-2

Note

You cannot provision or advertise BYOIPv6 address ranges in Local Zones at this time.

rtype

dict

returns

Response Syntax

{
    'ByoipCidr': {
        'Cidr': 'string',
        'Description': 'string',
        'AsnAssociations': [
            {
                'Asn': 'string',
                'Cidr': 'string',
                'StatusMessage': 'string',
                'State': 'disassociated'|'failed-disassociation'|'failed-association'|'pending-disassociation'|'pending-association'|'associated'
            },
        ],
        'StatusMessage': 'string',
        'State': 'advertised'|'deprovisioned'|'failed-deprovision'|'failed-provision'|'pending-deprovision'|'pending-provision'|'provisioned'|'provisioned-not-publicly-advertisable',
        'NetworkBorderGroup': 'string'
    }
}

Response Structure

  • (dict) --

    • ByoipCidr (dict) --

      Information about the address range.

      • Cidr (string) --

        The address range, in CIDR notation.

      • Description (string) --

        The description of the address range.

      • AsnAssociations (list) --

        The BYOIP CIDR associations with ASNs.

        • (dict) --

          An Autonomous System Number (ASN) and BYOIP CIDR association.

          • Asn (string) --

            The association's ASN.

          • Cidr (string) --

            The association's CIDR.

          • StatusMessage (string) --

            The association's status message.

          • State (string) --

            The association's state.

      • StatusMessage (string) --

        Upon success, contains the ID of the address pool. Otherwise, contains an error message.

      • State (string) --

        The state of the address pool.

      • NetworkBorderGroup (string) --

        If you have Local Zones enabled, you can choose a network border group for Local Zones when you provision and advertise a BYOIPv4 CIDR. Choose the network border group carefully as the EIP and the Amazon Web Services resource it is associated with must reside in the same network border group.

        You can provision BYOIP address ranges to and advertise them in the following Local Zone network border groups:

        • us-east-1-dfw-2

        • us-west-2-lax-1

        • us-west-2-phx-2

        Note

        You cannot provision or advertise BYOIPv6 address ranges in Local Zones at this time.

WithdrawByoipCidr (updated) Link ¶
Changes (response)
{'ByoipCidr': {'NetworkBorderGroup': 'string'}}

Stops advertising an address range that is provisioned as an address pool.

You can perform this operation at most once every 10 seconds, even if you specify different address ranges each time.

It can take a few minutes before traffic to the specified addresses stops routing to Amazon Web Services because of BGP propagation delays.

See also: AWS API Documentation

Request Syntax

client.withdraw_byoip_cidr(
    Cidr='string',
    DryRun=True|False
)
type Cidr

string

param Cidr

[REQUIRED]

The address range, in CIDR notation.

type DryRun

boolean

param DryRun

Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation . Otherwise, it is UnauthorizedOperation .

rtype

dict

returns

Response Syntax

{
    'ByoipCidr': {
        'Cidr': 'string',
        'Description': 'string',
        'AsnAssociations': [
            {
                'Asn': 'string',
                'Cidr': 'string',
                'StatusMessage': 'string',
                'State': 'disassociated'|'failed-disassociation'|'failed-association'|'pending-disassociation'|'pending-association'|'associated'
            },
        ],
        'StatusMessage': 'string',
        'State': 'advertised'|'deprovisioned'|'failed-deprovision'|'failed-provision'|'pending-deprovision'|'pending-provision'|'provisioned'|'provisioned-not-publicly-advertisable',
        'NetworkBorderGroup': 'string'
    }
}

Response Structure

  • (dict) --

    • ByoipCidr (dict) --

      Information about the address pool.

      • Cidr (string) --

        The address range, in CIDR notation.

      • Description (string) --

        The description of the address range.

      • AsnAssociations (list) --

        The BYOIP CIDR associations with ASNs.

        • (dict) --

          An Autonomous System Number (ASN) and BYOIP CIDR association.

          • Asn (string) --

            The association's ASN.

          • Cidr (string) --

            The association's CIDR.

          • StatusMessage (string) --

            The association's status message.

          • State (string) --

            The association's state.

      • StatusMessage (string) --

        Upon success, contains the ID of the address pool. Otherwise, contains an error message.

      • State (string) --

        The state of the address pool.

      • NetworkBorderGroup (string) --

        If you have Local Zones enabled, you can choose a network border group for Local Zones when you provision and advertise a BYOIPv4 CIDR. Choose the network border group carefully as the EIP and the Amazon Web Services resource it is associated with must reside in the same network border group.

        You can provision BYOIP address ranges to and advertise them in the following Local Zone network border groups:

        • us-east-1-dfw-2

        • us-west-2-lax-1

        • us-west-2-phx-2

        Note

        You cannot provision or advertise BYOIPv6 address ranges in Local Zones at this time.