:doc:`EC2 <../../ec2>` / Client / create_ipam

***********
create_ipam
***********



.. py:method:: EC2.Client.create_ipam(**kwargs)

  

  Create an IPAM. Amazon VPC IP Address Manager (IPAM) is a VPC feature that you can use to automate your IP address management workflows including assigning, tracking, troubleshooting, and auditing IP addresses across Amazon Web Services Regions and accounts throughout your Amazon Web Services Organization.

   

  For more information, see `Create an IPAM <https://docs.aws.amazon.com/vpc/latest/ipam/create-ipam.html>`__ in the *Amazon VPC IPAM User Guide*.

  

  See also: `AWS API Documentation <https://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/CreateIpam>`_  


  **Request Syntax**
  ::

    response = client.create_ipam(
        DryRun=True|False,
        Description='string',
        OperatingRegions=[
            {
                'RegionName': 'string'
            },
        ],
        TagSpecifications=[
            {
                'ResourceType': 'capacity-reservation'|'client-vpn-endpoint'|'customer-gateway'|'carrier-gateway'|'coip-pool'|'declarative-policies-report'|'dedicated-host'|'dhcp-options'|'egress-only-internet-gateway'|'elastic-ip'|'elastic-gpu'|'export-image-task'|'export-instance-task'|'fleet'|'fpga-image'|'host-reservation'|'image'|'image-usage-report'|'import-image-task'|'import-snapshot-task'|'instance'|'instance-event-window'|'internet-gateway'|'ipam'|'ipam-pool'|'ipam-scope'|'ipv4pool-ec2'|'ipv6pool-ec2'|'key-pair'|'launch-template'|'local-gateway'|'local-gateway-route-table'|'local-gateway-virtual-interface'|'local-gateway-virtual-interface-group'|'local-gateway-route-table-vpc-association'|'local-gateway-route-table-virtual-interface-group-association'|'natgateway'|'network-acl'|'network-interface'|'network-insights-analysis'|'network-insights-path'|'network-insights-access-scope'|'network-insights-access-scope-analysis'|'outpost-lag'|'placement-group'|'prefix-list'|'replace-root-volume-task'|'reserved-instances'|'route-table'|'security-group'|'security-group-rule'|'service-link-virtual-interface'|'snapshot'|'spot-fleet-request'|'spot-instances-request'|'subnet'|'subnet-cidr-reservation'|'traffic-mirror-filter'|'traffic-mirror-session'|'traffic-mirror-target'|'transit-gateway'|'transit-gateway-attachment'|'transit-gateway-connect-peer'|'transit-gateway-multicast-domain'|'transit-gateway-policy-table'|'transit-gateway-metering-policy'|'transit-gateway-route-table'|'transit-gateway-route-table-announcement'|'volume'|'vpc'|'vpc-endpoint'|'vpc-endpoint-connection'|'vpc-endpoint-service'|'vpc-endpoint-service-permission'|'vpc-peering-connection'|'vpn-connection'|'vpn-gateway'|'vpc-flow-log'|'capacity-reservation-fleet'|'traffic-mirror-filter-rule'|'vpc-endpoint-connection-device-type'|'verified-access-instance'|'verified-access-group'|'verified-access-endpoint'|'verified-access-policy'|'verified-access-trust-provider'|'vpn-connection-device-type'|'vpc-block-public-access-exclusion'|'vpc-encryption-control'|'route-server'|'route-server-endpoint'|'route-server-peer'|'ipam-resource-discovery'|'ipam-resource-discovery-association'|'instance-connect-endpoint'|'verified-access-endpoint-target'|'ipam-external-resource-verification-token'|'capacity-block'|'mac-modification-task'|'ipam-prefix-list-resolver'|'ipam-policy'|'ipam-prefix-list-resolver-target'|'secondary-interface'|'secondary-network'|'secondary-subnet'|'capacity-manager-data-export'|'vpn-concentrator',
                'Tags': [
                    {
                        'Key': 'string',
                        'Value': 'string'
                    },
                ]
            },
        ],
        ClientToken='string',
        Tier='free'|'advanced',
        EnablePrivateGua=True|False,
        MeteredAccount='ipam-owner'|'resource-owner'
    )
    
  :type DryRun: boolean
  :param DryRun: 

    A check for whether you have the required permissions for the action without actually making the request and provides an error response. If you have the required permissions, the error response is ``DryRunOperation``. Otherwise, it is ``UnauthorizedOperation``.

    

  
  :type Description: string
  :param Description: 

    A description for the IPAM.

    

  
  :type OperatingRegions: list
  :param OperatingRegions: 

    The operating Regions for the IPAM. Operating Regions are Amazon Web Services Regions where the IPAM is allowed to manage IP address CIDRs. IPAM only discovers and monitors resources in the Amazon Web Services Regions you select as operating Regions.

     

    For more information about operating Regions, see `Create an IPAM <https://docs.aws.amazon.com/vpc/latest/ipam/create-ipam.html>`__ in the *Amazon VPC IPAM User Guide*.

    

  
    - *(dict) --* 

      Add an operating Region to an IPAM. Operating Regions are Amazon Web Services Regions where the IPAM is allowed to manage IP address CIDRs. IPAM only discovers and monitors resources in the Amazon Web Services Regions you select as operating Regions.

       

      For more information about operating Regions, see `Create an IPAM <https://docs.aws.amazon.com/vpc/latest/ipam/create-ipam.html>`__ in the *Amazon VPC IPAM User Guide*.

      

    
      - **RegionName** *(string) --* 

        The name of the operating Region.

        

      
    

  :type TagSpecifications: list
  :param TagSpecifications: 

    The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value. For example, to find all resources that have a tag with the key ``Owner`` and the value ``TeamA``, specify ``tag:Owner`` for the filter name and ``TeamA`` for the filter value.

    

  
    - *(dict) --* 

      The tags to apply to a resource when the resource is being created. When you specify a tag, you must specify the resource type to tag, otherwise the request will fail.

       

      .. note::

        

        The ``Valid Values`` lists all the resource types that can be tagged. However, the action you're using might not support tagging all of these resource types. If you try to tag a resource type that is unsupported for the action you're using, you'll get an error.

        

      

    
      - **ResourceType** *(string) --* 

        The type of resource to tag on creation.

        

      
      - **Tags** *(list) --* 

        The tags to apply to the resource.

        

      
        - *(dict) --* 

          Describes a tag.

          

        
          - **Key** *(string) --* 

            The key of the tag.

             

            Constraints: Tag keys are case-sensitive and accept a maximum of 127 Unicode characters. May not begin with ``aws:``.

            

          
          - **Value** *(string) --* 

            The value of the tag.

             

            Constraints: Tag values are case-sensitive and accept a maximum of 256 Unicode characters.

            

          
        
    
    

  :type ClientToken: string
  :param ClientToken: 

    A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. For more information, see `Ensuring idempotency <https://docs.aws.amazon.com/ec2/latest/devguide/ec2-api-idempotency.html>`__.

    This field is autopopulated if not provided.

  
  :type Tier: string
  :param Tier: 

    IPAM is offered in a Free Tier and an Advanced Tier. For more information about the features available in each tier and the costs associated with the tiers, see `Amazon VPC pricing > IPAM tab <http://aws.amazon.com/vpc/pricing/>`__.

    

  
  :type EnablePrivateGua: boolean
  :param EnablePrivateGua: 

    Enable this option to use your own GUA ranges as private IPv6 addresses. This option is disabled by default.

    

  
  :type MeteredAccount: string
  :param MeteredAccount: 

    A metered account is an Amazon Web Services account that is charged for active IP addresses managed in IPAM. For more information, see `Enable cost distribution <https://docs.aws.amazon.com/vpc/latest/ipam/ipam-enable-cost-distro.html>`__ in the *Amazon VPC IPAM User Guide*.

     

    Possible values:

     

    
    * ``ipam-owner`` (default): The Amazon Web Services account which owns the IPAM is charged for all active IP addresses managed in IPAM.
     
    * ``resource-owner``: The Amazon Web Services account that owns the IP address is charged for the active IP address.
    

    

  
  
  :rtype: dict
  :returns: 
    
    **Response Syntax**

    
    ::

      {
          'Ipam': {
              'OwnerId': 'string',
              'IpamId': 'string',
              'IpamArn': 'string',
              'IpamRegion': 'string',
              'PublicDefaultScopeId': 'string',
              'PrivateDefaultScopeId': 'string',
              'ScopeCount': 123,
              'Description': 'string',
              'OperatingRegions': [
                  {
                      'RegionName': 'string'
                  },
              ],
              'State': 'create-in-progress'|'create-complete'|'create-failed'|'modify-in-progress'|'modify-complete'|'modify-failed'|'delete-in-progress'|'delete-complete'|'delete-failed'|'isolate-in-progress'|'isolate-complete'|'restore-in-progress',
              'Tags': [
                  {
                      'Key': 'string',
                      'Value': 'string'
                  },
              ],
              'DefaultResourceDiscoveryId': 'string',
              'DefaultResourceDiscoveryAssociationId': 'string',
              'ResourceDiscoveryAssociationCount': 123,
              'StateMessage': 'string',
              'Tier': 'free'|'advanced',
              'EnablePrivateGua': True|False,
              'MeteredAccount': 'ipam-owner'|'resource-owner'
          }
      }
      
    **Response Structure**

    

    - *(dict) --* 
      

      - **Ipam** *(dict) --* 

        Information about the IPAM created.

        
        

        - **OwnerId** *(string) --* 

          The Amazon Web Services account ID of the owner of the IPAM.

          
        

        - **IpamId** *(string) --* 

          The ID of the IPAM.

          
        

        - **IpamArn** *(string) --* 

          The Amazon Resource Name (ARN) of the IPAM.

          
        

        - **IpamRegion** *(string) --* 

          The Amazon Web Services Region of the IPAM.

          
        

        - **PublicDefaultScopeId** *(string) --* 

          The ID of the IPAM's default public scope.

          
        

        - **PrivateDefaultScopeId** *(string) --* 

          The ID of the IPAM's default private scope.

          
        

        - **ScopeCount** *(integer) --* 

          The number of scopes in the IPAM. The scope quota is 5. For more information on quotas, see `Quotas in IPAM <https://docs.aws.amazon.com/vpc/latest/ipam/quotas-ipam.html>`__ in the *Amazon VPC IPAM User Guide*.

          
        

        - **Description** *(string) --* 

          The description for the IPAM.

          
        

        - **OperatingRegions** *(list) --* 

          The operating Regions for an IPAM. Operating Regions are Amazon Web Services Regions where the IPAM is allowed to manage IP address CIDRs. IPAM only discovers and monitors resources in the Amazon Web Services Regions you select as operating Regions.

           

          For more information about operating Regions, see `Create an IPAM <https://docs.aws.amazon.com/vpc/latest/ipam/create-ipam.html>`__ in the *Amazon VPC IPAM User Guide*.

          
          

          - *(dict) --* 

            The operating Regions for an IPAM. Operating Regions are Amazon Web Services Regions where the IPAM is allowed to manage IP address CIDRs. IPAM only discovers and monitors resources in the Amazon Web Services Regions you select as operating Regions.

             

            For more information about operating Regions, see `Create an IPAM <https://docs.aws.amazon.com/vpc/latest/ipam/create-ipam.html>`__ in the *Amazon VPC IPAM User Guide*.

            
            

            - **RegionName** *(string) --* 

              The name of the operating Region.

              
        
      
        

        - **State** *(string) --* 

          The state of the IPAM.

          
        

        - **Tags** *(list) --* 

          The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value. For example, to find all resources that have a tag with the key ``Owner`` and the value ``TeamA``, specify ``tag:Owner`` for the filter name and ``TeamA`` for the filter value.

          
          

          - *(dict) --* 

            Describes a tag.

            
            

            - **Key** *(string) --* 

              The key of the tag.

               

              Constraints: Tag keys are case-sensitive and accept a maximum of 127 Unicode characters. May not begin with ``aws:``.

              
            

            - **Value** *(string) --* 

              The value of the tag.

               

              Constraints: Tag values are case-sensitive and accept a maximum of 256 Unicode characters.

              
        
      
        

        - **DefaultResourceDiscoveryId** *(string) --* 

          The IPAM's default resource discovery ID.

          
        

        - **DefaultResourceDiscoveryAssociationId** *(string) --* 

          The IPAM's default resource discovery association ID.

          
        

        - **ResourceDiscoveryAssociationCount** *(integer) --* 

          The IPAM's resource discovery association count.

          
        

        - **StateMessage** *(string) --* 

          The state message.

          
        

        - **Tier** *(string) --* 

          IPAM is offered in a Free Tier and an Advanced Tier. For more information about the features available in each tier and the costs associated with the tiers, see `Amazon VPC pricing > IPAM tab <http://aws.amazon.com/vpc/pricing/>`__.

          
        

        - **EnablePrivateGua** *(boolean) --* 

          Enable this option to use your own GUA ranges as private IPv6 addresses. This option is disabled by default.

          
        

        - **MeteredAccount** *(string) --* 

          A metered account is an Amazon Web Services account that is charged for active IP addresses managed in IPAM. For more information, see `Enable cost distribution <https://docs.aws.amazon.com/vpc/latest/ipam/ipam-enable-cost-distro.html>`__ in the *Amazon VPC IPAM User Guide*.

           

          Possible values:

           

          
          * ``ipam-owner`` (default): The Amazon Web Services account which owns the IPAM is charged for all active IP addresses managed in IPAM.
           
          * ``resource-owner``: The Amazon Web Services account that owns the IP address is charged for the active IP address.
          

          
    
  