Pick the purposes you want to allowlist. The calculator computes the rules-per-security-group quota those prefix lists need in your account, from live feed counts, so you know the number before you ask for anything.
How the math works: a referenced prefix list consumes its
max_entries against the SG quota (default 60), per address family.
slash0 sizes max_entries as the current range count plus headroom of
at least 20 percent, rounded up to a multiple of ten, so vendor growth does not
force resizes. The recommendation below is the larger family total plus an
allowance of 20 for your own rules, rounded up to ten. AWS constrains
rules-per-SG times SGs-per-network-interface to at most 1000, so request the
minimum you need.
The default quota (60) already fits this selection; no quota increase is needed.
Already onboarded, with the lists shared to your account? Go to the onboarding stack.
Loading the catalog…
This number matters only for the hosted lists, which are shared to your account by arrangement through early access. Once a share exists, the onboarding stack accepts it and files this quota request for you; the template is public and worth reading first. The free tier (Terraform provider) needs no onboarding and no quota increase: Terraform writes the CIDRs into your rules directly, so the count above is what those rules will consume.