IpamRouteProtectionFinding¶
Structure Class¶
IpamRouteProtectionFinding
dataclass
¶
Bases: _SerdeShape
Contains information about a route protection finding, including the RPKI validation status of a BYOIP route announcement.
Attributes¶
advertisement_type
class-attribute
instance-attribute
¶
advertisement_type: str | None = ...
The advertisement type. Possible values:
-
regional- The IP address is advertised from a single location (regional services such as Amazon EC2). -
global- The IP address is advertised from multiple global locations simultaneously (global services such as Amazon CloudFront).
asn
class-attribute
instance-attribute
¶
asn: str | None = ...
The Autonomous System Number (ASN) that originates the route.
cidr
class-attribute
instance-attribute
¶
cidr: str | None = ...
The IP address prefix in CIDR notation.
ipam_pool_id
class-attribute
instance-attribute
¶
ipam_pool_id: str | None = ...
The ID of the IPAM pool associated with the finding.
network_border_group
class-attribute
instance-attribute
¶
network_border_group: str | None = ...
The network border group.
resource_owner_id
class-attribute
instance-attribute
¶
resource_owner_id: str | None = ...
The ID of the resource owner.
resource_region
class-attribute
instance-attribute
¶
resource_region: str | None = ...
The Amazon Web Services Region of the resource.
roa_sample_time
class-attribute
instance-attribute
¶
roa_sample_time: datetime | None = ...
The time when the ROA data was last sampled.
roas
class-attribute
instance-attribute
¶
roas: list[IpamRouteOriginAuthorization] | None = ...
The Route Origin Authorizations (ROAs) that cover the prefix.
route_overlaps
class-attribute
instance-attribute
¶
route_overlaps: list[IpamRouteOverlap] | None = ...
The overlapping routes detected for this prefix.
rpki_status
class-attribute
instance-attribute
¶
rpki_status: str | None = ...
The RPKI validation status of the route. Possible values:
-
valid- The route has a matching ROA that covers the prefix and origin ASN. -
invalid- The route has a ROA for the prefix, but the origin ASN or prefix length does not match. -
unknown- No ROA exists for the prefix, so RPKI validation cannot be performed.
rpki_strength
class-attribute
instance-attribute
¶
rpki_strength: str | None = ...
The RPKI enforcement strength for the route. Possible values:
-
strict- Invalid routes are rejected. -
permissive- Invalid routes are accepted but flagged.
sample_time
class-attribute
instance-attribute
¶
sample_time: datetime | None = ...
The time when the route was last sampled.
state
class-attribute
instance-attribute
¶
state: str | None = ...
The state of the BYOIP CIDR. Possible values:
-
advertised- The CIDR is being advertised. -
deprovisioned- The CIDR has been deprovisioned. -
failed-deprovision- Deprovisioning failed. -
failed-provision- Provisioning failed. -
pending-deprovision- Deprovisioning is in progress. -
pending-provision- Provisioning is in progress. -
provisioned- The CIDR is provisioned. -
provisioned-not-publicly-advertisable- The CIDR is provisioned but not publicly advertisable.