Skip to content

EC2  >  Operations  >  modify_vpc_encryption_control

modify_vpc_encryption_control

Operation

modify_vpc_encryption_control async

modify_vpc_encryption_control(input: ModifyVpcEncryptionControlInput, plugins: list[Plugin] | None = None) -> ModifyVpcEncryptionControlOutput

Modifies the encryption control configuration for a VPC. You can update the encryption mode and exclusion settings for various gateway types and peering connections.

For more information, see Enforce VPC encryption in transit in the Amazon VPC User Guide.

Parameters:

Name Type Description Default
input ModifyVpcEncryptionControlInput

An instance of ModifyVpcEncryptionControlInput.

required
plugins list[Plugin] | None

A list of callables that modify the configuration dynamically. Changes made by these plugins only apply for the duration of the operation execution and will not affect any other operation invocations.

None

Returns:

Type Description
ModifyVpcEncryptionControlOutput

An instance of ModifyVpcEncryptionControlOutput.

Input

ModifyVpcEncryptionControlInput dataclass

Bases: _SerdeShape

Dataclass for ModifyVpcEncryptionControlInput structure.

Attributes

dry_run class-attribute instance-attribute
dry_run: bool | None = ...

Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.

egress_only_internet_gateway_exclusion class-attribute instance-attribute
egress_only_internet_gateway_exclusion: str | None = ...

Specifies whether to exclude egress-only internet gateway traffic from encryption enforcement.

elastic_file_system_exclusion class-attribute instance-attribute
elastic_file_system_exclusion: str | None = ...

Specifies whether to exclude Elastic File System traffic from encryption enforcement.

internet_gateway_exclusion class-attribute instance-attribute
internet_gateway_exclusion: str | None = ...

Specifies whether to exclude internet gateway traffic from encryption enforcement.

lambda_exclusion class-attribute instance-attribute
lambda_exclusion: str | None = ...

Specifies whether to exclude Lambda function traffic from encryption enforcement.

mode class-attribute instance-attribute
mode: str | None = ...

The encryption mode for the VPC Encryption Control configuration.

nat_gateway_exclusion class-attribute instance-attribute
nat_gateway_exclusion: str | None = ...

Specifies whether to exclude NAT gateway traffic from encryption enforcement.

virtual_private_gateway_exclusion class-attribute instance-attribute
virtual_private_gateway_exclusion: str | None = ...

Specifies whether to exclude virtual private gateway traffic from encryption enforcement.

vpc_encryption_control_id class-attribute instance-attribute
vpc_encryption_control_id: str | None = ...

The ID of the VPC Encryption Control resource to modify.

vpc_lattice_exclusion class-attribute instance-attribute
vpc_lattice_exclusion: str | None = ...

Specifies whether to exclude VPC Lattice traffic from encryption enforcement.

vpc_peering_exclusion class-attribute instance-attribute
vpc_peering_exclusion: str | None = ...

Specifies whether to exclude VPC peering connection traffic from encryption enforcement.

Output

ModifyVpcEncryptionControlOutput dataclass

Bases: _SerdeShape

Dataclass for ModifyVpcEncryptionControlOutput structure.

Attributes

response_metadata class-attribute instance-attribute
response_metadata: ResponseMetadata = ...

Metadata about the response that produced this output. Use this to recover the request identifiers a service's support team needs in order to investigate a call. Members of the metadata are individually optional.

vpc_encryption_control class-attribute instance-attribute
vpc_encryption_control: VpcEncryptionControl | None = ...

Information about the VPC Encryption Control configuration.