Create Confluent Cloud Network on AWS

Each Confluent Cloud network is a virtual network that is provisioned in your Confluent Cloud AWS account.

You can create multiple Dedicated Kafka clusters within each Confluent Cloud network.

For details on default service quotas, see Network service quotas.


Before you create a Confluent Cloud network, you need the following information.

Name your Confluent Cloud network

The name you choose is used to identify your network in the Confluent Cloud Console and when using the Confluent CLI. Choose a meaningful name, but also consider including the connection type in the name, for example, My-Transit-Gateway-CCN-1.

Select Region and Availability Zones

Dedicated clusters you create in your Confluent Cloud network inherit the selected Region and Availability Zones.

Select CIDR blocks and block size


Limited Availability

Support for /27 CIDR blocks is in Limited Availability to a subset of Confluent customers. To be considered for access before General Availability, contact Confluent Support.

By default, you can select a /16 CIDR block for use with your VPC Peering and Transit Gateway Confluent Cloud networks on AWS.

With the Limited Availability feature enabled, you can select either one /16 CIDR block or multiple /27 CIDR blocks (one for each Availability Zone).

The CIDR block must be in one of the following private IP ranges:

  • RFC 1918 private address spaces:

  • RFC 6598 private address space:

  • RFC 2544 private address space:


      This CIDR block is incompatible with Transit Gateway-to-Transit Gateway Cluster Linking.

Additional requirements for selecting a /16 CIDR block:

  • Selected CIDR block cannot overlap with existing Confluent Cloud /16 CIDR blocks.

  • The CIDR block cannot overlap with the following IP ranges:


    CIDRs for your VPCs that need to be directly routable cannot overlap with the above CIDR blocks due to routing conflicts with Confluent services. More specifically:

    • You cannot peer the Confluent Cloud network with your VPCs using any of the above CIDRs.
    • You cannot set up routes to those networks using the above CIDR blocks through the transit gateways. For example, managed connectors cannot reach the sources or sinks in those IP ranges.
  • You cannot switch to /27 CIDR blocks after the Confluent Cloud network is provisioned.

Create a Confluent Cloud network on AWS

Follow the procedure below to create a Confluent Cloud network on AWS.

You can host multiple clusters within one Confluent Cloud network. For details on service quotas, see Network.

  1. In the Confluent Cloud Console, go to the Network management page for your environment.

  2. Click Create your first network if this is the first network in your environment, or click + Add Network if your environment has existing networks.

  3. Select AWS as the cloud service provider and select the geographic region in Region.

  4. Select the connectivity type: Transit Gateway, VPC Peering, or PrivateLink.

    Depending on the option selected, different Zone Placement options and CIDR for Confluent Cloud fields will appear.

    • Transit Gateway: Cluster is accessible using the transit gateway endpoint.
    • VPC Peering: Cluster is accessible using the VPC peering endpoint.
    • PrivateLink: Cluster is accessible using AWS PrivateLink connections.
  5. Complete the steps for the connectivity type you selected and then click Continue.


    After provisioning your new Confluent Cloud network, you cannot change your selected Availability Zone (AZ) IDs or CIDR block size. Make sure to deploy a network based on your zonal requirements.

    Under Zone Placement, select three zones for your network.

    Depending on support for zones, you might only have three zones to choose from.

    For Limited Availability users:

    1. Select the Zone Placement option you want to use:

      • VPC: Uses a single /16 CIDR block.
      • AZ: Requires three /27 CIDR blocks (one for each Availability Zone).
    2. Select three Availability Zones.

      • For the VPC option, assign a /16 CIDR block.
      • For the AZ, assign three /27 CIDR blocks (one for each Availability Zone).

      Note that depending on the availability of supported zones, you might have only three zones to select.

    3. Click Continue.

    For more information about CIDR block options, see Select CIDR blocks and block size above.

  6. Specify a Network Name, review your configuration, and click Create Network.

Your Confluent Cloud network is created and provisioned within 20 minutes.

Next steps

After successfully provisioning the Confluent Cloud network on AWS, you can add Dedicated Kafka clusters within your Confluent Cloud network by using the following options: