InterfaceVpcEndpointProps Struct
Construction properties for an InterfaceVpcEndpoint.
Example
ts
declare const vpc: ec2.Vpc;
new ec2.InterfaceVpcEndpoint(this, 'VPC Endpoint', {
vpc,
service: new ec2.InterfaceVpcEndpointService('com.amazonaws.vpce.us-east-1.vpce-svc-uuddlrlrbastrtsvc', 443),
subnets: {
subnetType: ec2.SubnetType.PRIVATE_ISOLATED,
availabilityZones: ['us-east-1a', 'us-east-1c']
}
});
Properties
dnsRecordIpTypeVpcEndpointDnsRecordIpTypedns_record_ip_typeVpcEndpointDnsRecordIpTypednsRecordIpTypeVpcEndpointDnsRecordIpTypeDnsRecordIpTypeVpcEndpointDnsRecordIpTypeDnsRecordIpTypeVpcEndpointDnsRecordIpType= not specified#Type of DNS records created for the VPC endpoint.
ipAddressTypeVpcEndpointIpAddressTypeip_address_typeVpcEndpointIpAddressTypeipAddressTypeVpcEndpointIpAddressTypeIpAddressTypeVpcEndpointIpAddressTypeIpAddressTypeVpcEndpointIpAddressType= not specified#The IP address type for the endpoint.
lookupSupportedAzsbooleanlookup_supported_azsboollookupSupportedAzsBooleanLookupSupportedAzsboolLookupSupportedAzs*bool= false#Limit to only those availability zones where the endpoint service can be created.
Setting this to 'true' requires a lookup to be performed at synthesis time. Account and region must be set on the containing stack for this to work.
Whether to automatically allow VPC traffic to the endpoint.
If enabled, all traffic to the endpoint from within the VPC will be automatically allowed. This is done based on the VPC's CIDR range.
privateDnsEnabledbooleanprivate_dns_enabledboolprivateDnsEnabledBooleanPrivateDnsEnabledboolPrivateDnsEnabled*bool= set by the instance of IInterfac…#Whether to associate a private hosted zone with the specified VPC.
This allows you to make requests to the service using its default DNS hostname.
default
Default: set by the instance of IInterfaceVpcEndpointService, or true if not defined by the instance of IInterfaceVpcEndpointService
privateDnsOnlyForInboundResolverEndpointVpcEndpointPrivateDnsOnlyForInboundResolverEndpointprivate_dns_only_for_inbound_resolver_endpointVpcEndpointPrivateDnsOnlyForInboundResolverEndpointprivateDnsOnlyForInboundResolverEndpointVpcEndpointPrivateDnsOnlyForInboundResolverEndpointPrivateDnsOnlyForInboundResolverEndpointVpcEndpointPrivateDnsOnlyForInboundResolverEndpointPrivateDnsOnlyForInboundResolverEndpointVpcEndpointPrivateDnsOnlyForInboundResolverEndpoint= not specified#Whether to enable private DNS only for inbound endpoints.
securityGroupsISecurityGroup[]security_groupstyping.List[ISecurityGroup]securityGroupsList<ISecurityGroup>SecurityGroupsISecurityGroup[]SecurityGroups*[]ISecurityGroup= a new security group is created#The security groups to associate with this interface VPC endpoint.
serviceIInterfaceVpcEndpointServiceserviceIInterfaceVpcEndpointServiceserviceIInterfaceVpcEndpointServiceServiceIInterfaceVpcEndpointServiceServiceIInterfaceVpcEndpointServicerequired#The service to use for this interface VPC endpoint.
serviceRegionstringservice_regionstrserviceRegionStringServiceRegionstringServiceRegion*string= Same region as the interface VPC…#The region where the VPC endpoint service is located.
Only needs to be specified for cross-region VPC endpoints.
default
Default: Same region as the interface VPC endpoint
subnetsSubnetSelectionsubnetsSubnetSelectionsubnetsSubnetSelectionSubnetsSubnetSelectionSubnetsSubnetSelection= private subnets#The subnets in which to create an endpoint network interface.
At most one per availability zone.