AWS CDK Reference

Appearance

v2.273.0

VpcEncryptionControlProperty Struct ​

Describes the configuration and state of VPC encryption controls.

For more information, see Enforce VPC encryption in transit in the Amazon VPC User Guide.

Source
Generated code
Type last changed
v2.264.0 · 10 Aug 2026

Example ​

ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_ec2 as ec2 } from 'aws-cdk-lib';
const vpcEncryptionControlProperty: ec2.CfnVPC.VpcEncryptionControlProperty = {
  egressOnlyInternetGatewayExclusion: 'egressOnlyInternetGatewayExclusion',
  elasticFileSystemExclusion: 'elasticFileSystemExclusion',
  internetGatewayExclusion: 'internetGatewayExclusion',
  lambdaExclusion: 'lambdaExclusion',
  mode: 'mode',
  natGatewayExclusion: 'natGatewayExclusion',
  resourceExclusions: {
    egressOnlyInternetGateway: {
      state: 'state',
      stateMessage: 'stateMessage',
    },
    elasticFileSystem: {
      state: 'state',
      stateMessage: 'stateMessage',
    },
    internetGateway: {
      state: 'state',
      stateMessage: 'stateMessage',
    },
    lambda: {
      state: 'state',
      stateMessage: 'stateMessage',
    },
    natGateway: {
      state: 'state',
      stateMessage: 'stateMessage',
    },
    virtualPrivateGateway: {
      state: 'state',
      stateMessage: 'stateMessage',
    },
    vpcLattice: {
      state: 'state',
      stateMessage: 'stateMessage',
    },
    vpcPeering: {
      state: 'state',
      stateMessage: 'stateMessage',
    },
  },
  state: 'state',
  stateMessage: 'stateMessage',
  virtualPrivateGatewayExclusion: 'virtualPrivateGatewayExclusion',
  vpcEncryptionControlId: 'vpcEncryptionControlId',
  vpcId: 'vpcId',
  vpcLatticeExclusion: 'vpcLatticeExclusion',
  vpcPeeringExclusion: 'vpcPeeringExclusion',
};

Properties ​

egressOnlyInternetGatewayExclusionstringegress_only_internet_gateway_exclusionstregressOnlyInternetGatewayExclusionStringEgressOnlyInternetGatewayExclusionstringEgressOnlyInternetGatewayExclusion*string#
elasticFileSystemExclusionstringelastic_file_system_exclusionstrelasticFileSystemExclusionStringElasticFileSystemExclusionstringElasticFileSystemExclusion*string#
internetGatewayExclusionstringinternet_gateway_exclusionstrinternetGatewayExclusionStringInternetGatewayExclusionstringInternetGatewayExclusion*string#
lambdaExclusionstringlambda_exclusionstrlambdaExclusionStringLambdaExclusionstringLambdaExclusion*string#
modestringmodestrmodeStringModestringMode*string#
The encryption mode for the VPC Encryption Control configuration.
natGatewayExclusionstringnat_gateway_exclusionstrnatGatewayExclusionStringNatGatewayExclusionstringNatGatewayExclusion*string#
resourceExclusionsIResolvable | CfnVPC.VpcEncryptionControlExclusionsPropertyresource_exclusionstyping.Union[IResolvable, VpcEncryptionControlExclusionsProperty]resourceExclusionsIResolvableResourceExclusionsIResolvableResourceExclusionsinterface{}#
Describes the exclusion configurations for various resource types in VPC Encryption Control.

For more information, see Enforce VPC encryption in transit in the Amazon VPC User Guide.

statestringstatestrstateStringStatestringState*string#
The current state of the VPC Encryption Control configuration.
stateMessagestringstate_messagestrstateMessageStringStateMessagestringStateMessage*string#
A message providing additional information about the encryption control state.
virtualPrivateGatewayExclusionstringvirtual_private_gateway_exclusionstrvirtualPrivateGatewayExclusionStringVirtualPrivateGatewayExclusionstringVirtualPrivateGatewayExclusion*string#
vpcEncryptionControlIdstringvpc_encryption_control_idstrvpcEncryptionControlIdStringVpcEncryptionControlIdstringVpcEncryptionControlId*string#
The ID of the VPC Encryption Control configuration.
vpcIdstringvpc_idstrvpcIdStringVpcIdstringVpcId*string#
The ID of the VPC associated with the encryption control configuration.
vpcLatticeExclusionstringvpc_lattice_exclusionstrvpcLatticeExclusionStringVpcLatticeExclusionstringVpcLatticeExclusion*string#
vpcPeeringExclusionstringvpc_peering_exclusionstrvpcPeeringExclusionStringVpcPeeringExclusionstringVpcPeeringExclusion*string#