AWS WAF icon

AWS WAF

Manage AWS WAF IP Sets - Add/Remove IP from blacklist

Actions4

Remove IP from Blacklist

AI-generated

Summary

Removes one or more IP addresses from an existing AWS WAF IP Set.

Inputs

  • scope (required) — Specifies whether the IP Set is regional (REGIONAL) or global (CLOUDFRONT).
  • ipSetName (required) — The name of the existing IP Set to modify.
  • ipSetId (required) — The unique identifier of the existing IP Set.
  • ipAddresses (required) — IP addresses in CIDR notation to remove. Multiple addresses can be separated by commas or provided as a JSON array.

Output shape

A list of items, each containing a JSON object with operation details (success status, message, list of removed addresses, total count in the set).

The operation fetches the current IP Set to retrieve the LockToken before updating, then returns the updated address list and the new LockToken.

Examples

Example 1: Remove a single IP from a regional IP Set.

Scope: REGIONAL, IP Set Name: 'MyBlocklist', IP Set ID: 'abcd1234', IP Addresses: '192.168.1.5/32'

Example 2: Remove multiple IPs from a CloudFront IP Set.

Scope: CLOUDFRONT, IP Set Name: 'GlobalBlocklist', IP Set ID: 'efgh5678', IP Addresses: '10.0.0.0/24, 172.16.0.0/16'

Links

Discussion