Work with customer-managed prefix lists
This section describes how to work with customer-managed prefix lists.
Contents
Create a prefix list
When you create a prefix list, you must specify the maximum number of entries that the prefix list can support.
Limitation
You can't add a prefix list to a security group rule if the number of rules plus the max entries for the prefix list exceeds the quota for rules per security group for your account.
To create a prefix list using the console
Open the Amazon VPC console at https://console.aws.amazon.com/vpc/
. In the navigation pane, choose Managed Prefix Lists.
-
Choose Create prefix list.
-
For Prefix list name, enter a name for the prefix list.
-
For Max entries, enter the maximum number of entries for the prefix list.
-
For Address family, choose whether the prefix list supports IPv4 or IPv6 entries.
-
For Prefix list entries, choose Add new entry, and enter the CIDR block and a description for the entry. Repeat this step for each entry.
-
(Optional) For Tags, add tags to the prefix list to help you identify it later.
-
Choose Create prefix list.
To create a prefix list using the AWS CLI
Use the create-managed-prefix-list command.
View prefix lists
You can view your prefix lists, prefix lists that are shared with you, and AWS-managed prefix lists.
To view prefix lists using the console
Open the Amazon VPC console at https://console.aws.amazon.com/vpc/
. -
In the navigation pane, choose Managed Prefix Lists.
-
The Owner ID column shows the AWS account ID of the prefix list owner. For AWS-managed prefix lists, the Owner ID is AWS.
To view prefix lists using the AWS CLI
Use the describe-managed-prefix-lists command.
View the entries for a prefix list
You can view the entries for your prefix lists, prefix lists that are shared with you, and AWS-managed prefix lists.
To view the entries for a prefix list using the console
Open the Amazon VPC console at https://console.aws.amazon.com/vpc/
. In the navigation pane, choose Managed Prefix Lists.
-
Select the checkbox for the prefix list.
-
In the lower pane, choose Entries to view the entries for the prefix list.
To view the entries for a prefix list using the AWS CLI
Use the get-managed-prefix-list-entries command.
View associations (references) for your prefix list
You can view the IDs and owners of the resources that are associated with your prefix list. Associated resources are resources that reference your prefix list in their entries or rules.
Limitation
You cannot view associated resources for an AWS-managed prefix list.
To view prefix list associations using the console
Open the Amazon VPC console at https://console.aws.amazon.com/vpc/
. In the navigation pane, choose Managed Prefix Lists.
-
Select the checkbox for the prefix list.
-
In the lower pane, choose Associations to view the resources that are referencing the prefix list.
To view prefix list associations using the AWS CLI
Use the get-managed-prefix-list-associations command.
Modify a prefix list
You can modify the name of your prefix list, and you can add or remove entries. To modify the maximum number of entries, see Resize a prefix list.
Updating the entries of a prefix list creates a new version of the prefix list. Updating the name or maximum number of entries for a prefix list does not create a new version of the prefix list.
Considerations
-
You cannot modify an AWS-managed prefix list.
-
When you increase the maximum number of entries in a prefix list, the increased maximum size is applied to the quota of entries for the resources that reference the prefix list. If any of these resources can't support the increased maximum size, the modify operation fails and the previous maximum size is restored.
To modify a prefix list using the console
Open the Amazon VPC console at https://console.aws.amazon.com/vpc/
. -
In the navigation pane, choose Managed Prefix Lists.
-
Select the checkbox for prefix list, and choose Actions, Modify prefix list.
-
For Prefix list name, enter a new name for the prefix list.
-
For Prefix list entries, choose Remove to remove an existing entry. To add a new entry, choose Add new entry and enter the CIDR block and a description for the entry.
-
Choose Save prefix list.
To modify a prefix list using the AWS CLI
Use the modify-managed-prefix-list command.
Resize a prefix list
You can resize a prefix list and modify the maximum number of entries for the prefix list up to 1000. For more information about customer-managed prefix list quotas, see Customer-managed prefix lists.
To resize a prefix list using the console
Open the Amazon VPC console at https://console.aws.amazon.com/vpc/
. -
In the navigation pane, choose Managed Prefix Lists.
-
Select the checkbox for the prefix list, and choose Actions, Resize prefix list.
-
For New max entries, enter a value.
-
Choose Resize.
To resize a prefix list using the AWS CLI
Use the modify-managed-prefix-list command.
Restore a previous version of a prefix list
You can restore the entries from a previous version of your prefix list. This creates a new version of the prefix list.
If you decreased the size of the prefix list, you must ensure that the prefix list is large enough to contain the entries from the previous version.
To restore a previous version of a prefix list using the console
Open the Amazon VPC console at https://console.aws.amazon.com/vpc/
. -
In the navigation pane, choose Managed Prefix Lists.
-
Select the checkbox for the prefix list, and choose Actions, Restore prefix list.
-
For Select prefix list version, choose a previous version. The entries for the selected version are displayed in Prefix list entries.
-
Choose Restore prefix list.
To restore a previous version of a prefix list using the AWS CLI
Use the restore-managed-prefix-list-version command.
Delete a prefix list
To delete a prefix list, you must first remove any references to it in your resources (such as in your route tables). If you've shared the prefix list using AWS RAM, any references in consumer-owned resources must first be removed.
Limitation
You cannot delete an AWS-managed prefix list.
To delete a prefix list using the console
Open the Amazon VPC console at https://console.aws.amazon.com/vpc/
. -
In the navigation pane, choose Managed Prefix Lists.
-
Select the prefix list, and choose Actions, Delete prefix list.
-
In the confirmation dialog box, enter
delete, and choose Delete.
To delete a prefix list using the AWS CLI
Use the delete-managed-prefix-list command.
