Select your cookie preferences

We use essential cookies and similar tools that are necessary to provide our site and services. We use performance cookies to collect anonymous statistics, so we can understand how customers use our site and make improvements. Essential cookies cannot be deactivated, but you can choose “Customize” or “Decline” to decline performance cookies.

If you agree, AWS and approved third parties will also use cookies to provide useful site features, remember your preferences, and display relevant content, including relevant advertising. To accept or decline all non-essential cookies, choose “Accept” or “Decline.” To make more detailed choices, choose “Customize.”

Move VPC CIDRs between scopes

Focus mode
Move VPC CIDRs between scopes - Amazon Virtual Private Cloud

Moving CIDRs between scopes allows you to optimize IP address allocation, organize by Region, separate concerns, enforce compliance, and adapt to infrastructure changes. This flexibility helps manage your IP address space efficiently as your workloads evolve.

Follow the steps in this section to move a VPC CIDR from one scope to another.

Important
  • You can only move VPC CIDRs. When you move a VPC CIDR, the VPC's subnet CIDRs are moved automatically as well.

  • You can only move VPC CIDRs from one private scope to another. You cannot move VPC CIDRs out of a public scope to a private scope or from a private scope to a public scope.

  • The same AWS account must own both scopes.

  • If a VPC CIDR is currently allocated from a pool in a private scope, the move request succeeds, but the VPC CIDR will not be moved until you release the VPC CIDR allocation from the current pool. For information on releasing an allocation, see Release an allocation.

AWS Management Console
To move a CIDR allocated to a VPC
  1. Open the IPAM console at https://console.aws.amazon.com/ipam/.

  2. In the navigation pane, choose Resources.

  3. From the dropdown menu at the top of the content pane, choose the scope you want to use.

  4. In the content pane, choose a VPC and view the details of the VPC.

  5. Under VPC CIDRs, select one of the CIDRs allocated to the resource and choose Actions > Move CIDR to different scope.

  6. Select the scope you want to move the VPC CIDR to.

  7. Choose Move CIDR to different scope.

Command line

Use the following AWS CLI commands to move a VPC CIDR:

  1. Get a VPC CIDR in current scope: get-ipam-resource-cidrs

  2. Move a VPC CIDR: modify-ipam-resource-cidr

  3. Get a VPC CIDR in the other scope: get-ipam-resource-cidrs

To move a CIDR allocated to a VPC
  1. Open the IPAM console at https://console.aws.amazon.com/ipam/.

  2. In the navigation pane, choose Resources.

  3. From the dropdown menu at the top of the content pane, choose the scope you want to use.

  4. In the content pane, choose a VPC and view the details of the VPC.

  5. Under VPC CIDRs, select one of the CIDRs allocated to the resource and choose Actions > Move CIDR to different scope.

  6. Select the scope you want to move the VPC CIDR to.

  7. Choose Move CIDR to different scope.

PrivacySite termsCookie preferences
© 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved.