diff --git a/jobs/aws_cpi/spec b/jobs/aws_cpi/spec
index 65a2f6e5..1ca413f1 100644
--- a/jobs/aws_cpi/spec
+++ b/jobs/aws_cpi/spec
@@ -55,6 +55,10 @@ properties:
       so the more retries the longer it can take to fail. This only applies
       to the AWS client passing calls to the AWS API.
     default: 8
+  aws.dualstack:
+    description: |
+      AWS provide new APIs to support IPv6. If you want to use IPv6 only, you must enable dualstack.
+    default: false
   aws.connection_options.ca_cert:
     description: All required custom CA certificates
     example:
diff --git a/jobs/aws_cpi/templates/cpi.json.erb b/jobs/aws_cpi/templates/cpi.json.erb
index 901379f2..8ceb9aaa 100644
--- a/jobs/aws_cpi/templates/cpi.json.erb
+++ b/jobs/aws_cpi/templates/cpi.json.erb
@@ -16,7 +16,8 @@ params = {
         "max_retries" => p('aws.max_retries'),
         "encrypted" => p('aws.encrypted'),
         "kms_key_arn" => p('aws.kms_key_arn', nil),
-        "metadata_options" => p('aws.metadata_options', nil)
+        "metadata_options" => p('aws.metadata_options', nil),
+        "dualstack" => p('aws.dualstack')
       },
       "agent" => {
         "ntp" => p('ntp')