modify_account_vpc_encryption_control¶
Operation¶
async
¶
modify_account_vpc_encryption_control(input: ModifyAccountVpcEncryptionControlInput, plugins: list[Plugin] | None = None) -> ModifyAccountVpcEncryptionControlOutput
Modifies the account-level VPC Encryption Control configuration. This sets the encryption control mode and resource exclusions that apply to the VPCs in your account. VPC Encryption Control enables you to enforce encryption for all data in transit within and between VPCs to meet compliance requirements.
For more information, see Enforce VPC encryption in transit in the Amazon VPC User Guide.
Parameters:
| Name | Type | Description | Default |
|---|---|---|---|
input
|
ModifyAccountVpcEncryptionControlInput
|
An instance of |
required |
plugins
|
list[Plugin] | None
|
A list of callables that modify the configuration dynamically. Changes made by these plugins only apply for the duration of the operation execution and will not affect any other operation invocations. |
None
|
Returns:
| Type | Description |
|---|---|
ModifyAccountVpcEncryptionControlOutput
|
An instance of |
Input¶
dataclass
¶
Bases: _SerdeShape
Dataclass for ModifyAccountVpcEncryptionControlInput structure.
Attributes¶
class-attribute
instance-attribute
¶
dry_run: bool | None = ...
Checks whether you have the required permissions for the action, without
actually making the request, and provides an error response. If you have
the required permissions, the error response is DryRunOperation.
Otherwise, it is UnauthorizedOperation.
class-attribute
instance-attribute
¶
egress_only_internet_gateway: str | None = ...
Specifies whether to exclude egress-only internet gateway resource from account-level encryption enforcement.
class-attribute
instance-attribute
¶
elastic_file_system: str | None = ...
Specifies whether to exclude Elastic File System service from account-level encryption enforcement.
class-attribute
instance-attribute
¶
internet_gateway: str | None = ...
Specifies whether to exclude internet gateway resource from account-level encryption enforcement.
class-attribute
instance-attribute
¶
lambda_: str | None = ...
Specifies whether to exclude Lambda service from account-level encryption enforcement.
class-attribute
instance-attribute
¶
mode: str | None = ...
The encryption mode for the account encryption control configuration.
class-attribute
instance-attribute
¶
nat_gateway: str | None = ...
Specifies whether to exclude NAT gateway resource from account-level encryption enforcement.
class-attribute
instance-attribute
¶
virtual_private_gateway: str | None = ...
Specifies whether to exclude virtual private gateway resource from account-level encryption enforcement.
Output¶
dataclass
¶
Bases: _SerdeShape
Dataclass for ModifyAccountVpcEncryptionControlOutput structure.
Attributes¶
class-attribute
instance-attribute
¶
Information about the account-level VPC Encryption Control configuration.
class-attribute
instance-attribute
¶
Metadata about the response that produced this output. Use this to recover the request identifiers a service's support team needs in order to investigate a call. Members of the metadata are individually optional.