This is the new CloudFormation Template Reference Guide. Please update your bookmarks and links. For help getting started with CloudFormation, see the AWS CloudFormation User Guide.
AWS::EC2::VPC VpcEncryptionControl
Describes the configuration and state of VPC encryption controls.
For more information, see Enforce VPC encryption in transit in the Amazon VPC User Guide.
Syntax
To declare this entity in your CloudFormation template, use the following syntax:
JSON
{ "EgressOnlyInternetGatewayExclusion" :String, "ElasticFileSystemExclusion" :String, "InternetGatewayExclusion" :String, "LambdaExclusion" :String, "Mode" :String, "NatGatewayExclusion" :String, "ResourceExclusions" :VpcEncryptionControlExclusions, "State" :String, "StateMessage" :String, "VirtualPrivateGatewayExclusion" :String, "VpcEncryptionControlId" :String, "VpcId" :String, "VpcLatticeExclusion" :String, "VpcPeeringExclusion" :String}
YAML
EgressOnlyInternetGatewayExclusion:StringElasticFileSystemExclusion:StringInternetGatewayExclusion:StringLambdaExclusion:StringMode:StringNatGatewayExclusion:StringResourceExclusions:VpcEncryptionControlExclusionsState:StringStateMessage:StringVirtualPrivateGatewayExclusion:StringVpcEncryptionControlId:StringVpcId:StringVpcLatticeExclusion:StringVpcPeeringExclusion:String
Properties
EgressOnlyInternetGatewayExclusionProperty description not available.
Required: No
Type: String
Allowed values:
enable | disableUpdate requires: Replacement
ElasticFileSystemExclusionProperty description not available.
Required: No
Type: String
Allowed values:
enable | disableUpdate requires: Replacement
InternetGatewayExclusionProperty description not available.
Required: No
Type: String
Allowed values:
enable | disableUpdate requires: Replacement
LambdaExclusionProperty description not available.
Required: No
Type: String
Allowed values:
enable | disableUpdate requires: Replacement
Mode-
The encryption mode for the VPC Encryption Control configuration.
Required: No
Type: String
Allowed values:
monitor | enforceUpdate requires: Replacement
NatGatewayExclusionProperty description not available.
Required: No
Type: String
Allowed values:
enable | disableUpdate requires: Replacement
ResourceExclusions-
Information about resource exclusions for the VPC Encryption Control configuration.
Required: No
Type: VpcEncryptionControlExclusions
Update requires: Replacement
State-
The current state of the VPC Encryption Control configuration.
Required: No
Type: String
Allowed values:
enforce-in-progress | monitor-in-progress | enforce-failed | monitor-failed | deleting | deleted | available | creating | delete-failedUpdate requires: Replacement
StateMessage-
A message providing additional information about the encryption control state.
Required: No
Type: String
Update requires: Replacement
VirtualPrivateGatewayExclusionProperty description not available.
Required: No
Type: String
Allowed values:
enable | disableUpdate requires: Replacement
VpcEncryptionControlId-
The ID of the VPC Encryption Control configuration.
Required: No
Type: String
Update requires: Replacement
VpcId-
The ID of the VPC associated with the encryption control configuration.
Required: No
Type: String
Update requires: Replacement
VpcLatticeExclusionProperty description not available.
Required: No
Type: String
Allowed values:
enable | disableUpdate requires: Replacement
VpcPeeringExclusionProperty description not available.
Required: No
Type: String
Allowed values:
enable | disableUpdate requires: Replacement
