AWS::EC2::IpamInternetRegistryAssociation

EC2 IpamInternetRegistryAssociation

An association between an IPAM and a Regional Internet Registry (RIR) for delegated Resource Public Key Infrastructure (RPKI) management. Use it to have IPAM create Route Origin Authorizations (ROAs) for IP address prefixes registered with the internet registry. The IPAM must be in the Advanced tier.

Properties

5 configurable properties. 3 required. Click a row to see details.

Filter:

Property	Type	Flags
`IpamId`	`string`	RequiredCreate-only
`OrganizationHandle`	`string`	RequiredCreate-only
`Rir`	`string`	RequiredCreate-only
`Description`	`string`	Create-only
`Tags`	`Array<Tag>`

Return Values

Values returned after the resource is created. Access these with Fn::GetAtt.

Attribute	Type	Description
`ChildRequestXml`	`string`	The XML content for the child request to be submitted to the internet registry to complete the BPKI setup.
`IpamInternetRegistryAssociationArn`	`string`	The Amazon Resource Name (ARN) of the internet registry association.
`IpamInternetRegistryAssociationId`	`string`	The ID of the internet registry association.
`IpamRegion`	`string`	The Amazon Web Services Region of the IPAM.
`OwnerId`	`string`	The ID of the Amazon Web Services account that owns the internet registry association.
`State`	`string`	The state of the internet registry association.

Sample CloudFormation Template

A minimal template with required properties and common optional ones.

template.yaml

AWSTemplateFormatVersion: "2010-09-09"
Description: Sample template for AWS::EC2::IpamInternetRegistryAssociation

Resources:
  MyResource:
    Type: AWS::EC2::IpamInternetRegistryAssociation
    Properties:
      IpamId: "my-ipamid"
      Rir: "RIPE"
      OrganizationHandle: "value"
      Tags:
        - Key: Environment
          Value: Production
      Description: !Ref "AWS::StackName"

Required IAM Permissions

Permissions CloudFormation needs in your IAM role to manage this resource.

create

ec2:CreateIpamInternetRegistryAssociationec2:DescribeIpamInternetRegistryAssociationsec2:CreateTags

read

ec2:DescribeIpamInternetRegistryAssociations

update

ec2:CreateTagsec2:DeleteTagsec2:DescribeIpamInternetRegistryAssociations

delete

ec2:DeleteIpamInternetRegistryAssociationec2:DescribeIpamInternetRegistryAssociationsec2:DeleteTags

list

ec2:DescribeIpamInternetRegistryAssociations

Get the EC2 Cheat Sheet

Everything you need to know about EC2 on one page. HD quality, print-friendly.

Download Free Infographic

Quick Facts

ServiceEC2

Properties11

Required3

TaggingSupported

Primary IDIpamInternetRegistryAssociationArn

Supported Operations

CreateReadUpdateDeleteList

Immutable After Creation

These properties cannot be changed after the resource is created. Updating them triggers a replacement.

IpamIdRirOrganizationHandleDescription

Related Resources

External Links

AWS Documentation