ModifyVpcBlockPublicAccessExclusion
Modify VPC Block Public Access (BPA) exclusions. A VPC BPA exclusion is a mode that can be applied to a single VPC or subnet that exempts it from the account’s BPA mode and will allow bidirectional or egress-only access. You can create BPA exclusions for VPCs and subnets even when BPA is not enabled on the account to ensure that there is no traffic disruption to the exclusions when VPC BPA is turned on.
Request Parameters
The following parameters are for this specific action. For more information about required and optional parameters that are common to all actions, see Common Query Parameters.
- DryRun
-
Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is
DryRunOperation
. Otherwise, it isUnauthorizedOperation
.Type: Boolean
Required: No
- ExclusionId
-
The ID of an exclusion.
Type: String
Required: Yes
- InternetGatewayExclusionMode
-
The exclusion mode for internet gateway traffic.
-
allow-bidirectional
: Allow all internet traffic to and from the excluded VPCs and subnets. -
allow-egress
: Allow outbound internet traffic from the excluded VPCs and subnets. Block inbound internet traffic to the excluded VPCs and subnets. Only applies when VPC Block Public Access is set to Bidirectional.
Type: String
Valid Values:
allow-bidirectional | allow-egress
Required: Yes
-
Response Elements
The following elements are returned by the service.
- requestId
-
The ID of the request.
Type: String
- vpcBlockPublicAccessExclusion
-
Details related to the exclusion.
Type: VpcBlockPublicAccessExclusion object
Errors
For information about the errors that are common to all actions, see Common client error codes.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following: