ReleaseBytes
aws AWS What's New ·

VPC IPAM adds BGP route protection and RPKI for BYOIP

networkingaws
feature

AWS VPC IPAM now supports BGP route protection monitoring and delegated RPKI management for BYOIP prefixes, allowing centralized monitoring and automated ROA management. This helps network administrators detect route hijacking, invalid ROAs, and route overlaps across their organization. The feature is available in most AWS commercial regions and simplifies previously manual processes for ROA management.

  • →Centrally monitor BGP route protection and automate ROA management
  • →Automated ROA lifecycle management for BYOIP prefixes
  • →Availability and resources
Features (1) ›
  • Centrally monitor BGP route protection and automate ROA management

    VPC IPAM now provides BGP route protection monitoring and delegated RPKI management for BYOIP prefixes. This allows network administrators to view RPKI validity, ROA strength, and route overlap detection from a single dashboard across accounts and regions.

Enhancements (1) ›
  • Automated ROA lifecycle management for BYOIP prefixes

    With Delegated RPKI, IPAM automatically creates, renews, and manages Route Origin Authorizations (ROAs) for BYOIP prefixes after an initial setup with a Regional Internet Registry. This eliminates the need for manual ROA creation and renewal, and reduces reliance on third-party tools.

Notes (1) ›
  • Availability and resources

    The new features are available in all commercial AWS Regions except AWS GovCloud (US), China (Beijing), and China (Ningxia). Documentation and pricing details are available through provided links.

Read the original announcement →

https://aws.amazon.com/about-aws/whats-new/2026/08/amazon-vpc-ipam-bgp-rpki-byoip/

Related releases