> **Experimental**
>
> `@aws-cdk/aws-bedrock-agentcore-alpha` is an [**experimental**](/stability) (alpha) package: its API may change in any release, without a major version bump.
# VpcConfigProps

VPC configuration properties.

Only used when network mode is VPC.

Extends: VpcConfigProps
Used as props by: BrowserNetworkConfiguration, CodeInterpreterNetworkConfiguration, NetworkConfiguration, RuntimeNetworkConfiguration

- Source: [`lib/network/network-configuration.ts`](https://github.com/aws/aws-cdk/blob/v2.274.0-alpha.0/packages/@aws-cdk/aws-bedrock-agentcore-alpha/lib/network/network-configuration.ts#L12)

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import * as bedrock_agentcore_alpha from '@aws-cdk/aws-bedrock-agentcore-alpha';
import { aws_ec2 as ec2 } from 'aws-cdk-lib';

declare const securityGroup: ec2.SecurityGroup;
declare const subnet: ec2.Subnet;
declare const subnetFilter: ec2.SubnetFilter;
declare const vpc: ec2.Vpc;
const vpcConfigProps: bedrock_agentcore_alpha.VpcConfigProps = {
  vpc: vpc,

  // the properties below are optional
  allowAllOutbound: false,
  securityGroups: [securityGroup],
  vpcSubnets: {
    availabilityZones: ['availabilityZones'],
    onePerAz: false,
    subnetFilters: [subnetFilter],
    subnetGroupName: 'subnetGroupName',
    subnets: [subnet],
    subnetType: ec2.SubnetType.PRIVATE_ISOLATED,
  },
};
```

## Properties

- `allowAllOutbound`: boolean = true — Whether to allow the resource to send all network traffic (except ipv6).

  If set to false, you must individually add traffic rules to allow the
  resource to connect to network targets.

  Do not specify this property if the `securityGroups` property is set.
  Instead, configure `allowAllOutbound` directly on the security group.

- `securityGroups`: [ISecurityGroup](/cdk/api/v2/docs/aws-cdk-lib.aws_ec2.ISecurityGroup.html)[] — The list of security groups to associate with the resource's network interfaces.

  **Default:** If the resource is placed within a VPC and a security group is not specified by this prop, a dedicated security group will be created for this resource.

  Only used if 'vpc' is supplied.

- `vpc`: [IVpc](/cdk/api/v2/docs/aws-cdk-lib.aws_ec2.IVpc.html) (required) — The VPC to deploy the resource to.

- `vpcSubnets`: [SubnetSelection](/cdk/api/v2/docs/aws-cdk-lib.aws_ec2.SubnetSelection.html) — Where to place the network interfaces within the VPC.

  **Default:** the Vpc default strategy if not specified

  This requires `vpc` to be specified in order for interfaces to actually be
  placed in the subnets. If `vpc` is not specify, this will raise an error.