AWS services that support IPv6
Computers and smart devices use IP addresses to communicate with each other over the internet and other networks. As the internet continues to grow, so does the need for IP addresses. The most common format for IP addresses is IPv4. The new format for IP addresses is IPv6, which provides a larger address space than IPv4.
AWS services support for IPv6 includes support for dual stack configuration (IPv4 and IPv6) or IPv6 only configurations. For example, a virtual private cloud (VPC) is a logically isolated section of the AWS Cloud where you can launch AWS resources. Within a VPC, you can create subnets that are IPv4 only, dual stack, or IPv6 only.
AWS services support access through public endpoints. Some AWS services also support access using private endpoints powered by AWS PrivateLink. AWS services can support IPv6 through their private endpoints even if they do not support IPv6 through their public endpoints. Endpoints that support IPv6 can respond to DNS queries with AAAA records.
Services that support IPv6
The following table lists the AWS services that provide dual stack support, IPv6 only support, and endpoints that support IPv6. We will update this table as we release additional support for IPv6. For the specifics about how a service supports IPv6, refer to the documentation for the service.
Service name | Dual stack support | IPv6 only support | Public endpoints support IPv6 | Private endpoints support IPv6 1 |
---|---|---|---|---|
AWS App Mesh | ||||
Amazon AppStream 2.0 | ||||
Amazon Athena | ||||
Amazon Aurora | ||||
AWS Cloud9 | ||||
AWS Cloud Control API | ||||
Amazon CloudFront | ||||
Amazon CloudWatch Logs | ||||
AWS Cloud Map | ||||
AWS Cloud WAN | ||||
AWS CodeArtifact | ||||
AWS Elastic Beanstalk | ||||
Amazon Cognito | ||||
Amazon Data Firehose | ||||
AWS Database Migration Service | ||||
AWS Direct Connect | ||||
Amazon EBS direct APIs | ||||
Amazon EC2 | ||||
Amazon ECS | ||||
Amazon EKS | ||||
Elastic Load Balancing | ||||
Amazon ElastiCache | ||||
AWS End User Messaging Social | ||||
AWS Fargate | ||||
Amazon Managed Grafana | ||||
AWS Global Accelerator | ||||
AWS Glue | ||||
AWS IoT | ||||
AWS Lake Formation | ||||
AWS Lambda | ||||
Amazon Lightsail | ||||
AWS Network Firewall | ||||
Amazon OpenSearch Service | ||||
AWS Private CA Connector for SCEP | ||||
AWS PrivateLink | ||||
Amazon Managed Service for Prometheus | ||||
Amazon RDS | ||||
Amazon RouteĀ 53 | ||||
Amazon S3 | ||||
AWS Secrets Manager | ||||
AWS Shield | ||||
AWS Site-to-Site VPN | ||||
AWS Transit Gateway | ||||
Amazon VPC | ||||
AWS WAF | ||||
Amazon WorkSpaces |
1 An empty cell indicates that the service does not integrate with AWS PrivateLink.
Additional IPv6 support
Compute
-
Amazon EC2 supports launching instances based on the Nitro System into IPv6-only subnets.
-
Amazon EC2 provides IPv6 endpoints for Instance Metadata Service (IMDS) and Amazon Time Sync Service.
Networking and Content Delivery
-
Amazon VPC supports creating IPv6-only subnets.
-
Amazon VPC helps IPv6 AWS resources communicate with IPv4 resources by supporting DNS64 on your subnets and NAT64 on your NAT gateways.
Security, Identity, and Compliance
-
AWS Identity and Access Management (IAM) supports IPv6 addresses in IAM identity-based policies.
-
Amazon Macie supports IPv6 addresses in personally identifiable information (PII).
Management and Governance
-
AWS CloudTrail records include source IPv6 information.
-
AWS CLI v2 supports download over IPv6 connections for IPv6-only clients.