Skip to content

EC2  >  Structures  >  IpamRouteProtectionFinding

IpamRouteProtectionFinding

Structure Class

IpamRouteProtectionFinding dataclass

Bases: _SerdeShape

Contains information about a route protection finding, including the RPKI validation status of a BYOIP route announcement.

Attributes

advertisement_type class-attribute instance-attribute
advertisement_type: str | None = ...

The advertisement type. Possible values:

  • regional - The IP address is advertised from a single location (regional services such as Amazon EC2).

  • global - The IP address is advertised from multiple global locations simultaneously (global services such as Amazon CloudFront).

asn class-attribute instance-attribute
asn: str | None = ...

The Autonomous System Number (ASN) that originates the route.

cidr class-attribute instance-attribute
cidr: str | None = ...

The IP address prefix in CIDR notation.

ipam_pool_id class-attribute instance-attribute
ipam_pool_id: str | None = ...

The ID of the IPAM pool associated with the finding.

network_border_group class-attribute instance-attribute
network_border_group: str | None = ...

The network border group.

pool_id class-attribute instance-attribute
pool_id: str | None = ...

The ID of the BYOIP pool.

resource_owner_id class-attribute instance-attribute
resource_owner_id: str | None = ...

The ID of the resource owner.

resource_region class-attribute instance-attribute
resource_region: str | None = ...

The Amazon Web Services Region of the resource.

roa_sample_time class-attribute instance-attribute
roa_sample_time: datetime | None = ...

The time when the ROA data was last sampled.

roas class-attribute instance-attribute
roas: list[IpamRouteOriginAuthorization] | None = ...

The Route Origin Authorizations (ROAs) that cover the prefix.

route_overlaps class-attribute instance-attribute
route_overlaps: list[IpamRouteOverlap] | None = ...

The overlapping routes detected for this prefix.

rpki_status class-attribute instance-attribute
rpki_status: str | None = ...

The RPKI validation status of the route. Possible values:

  • valid - The route has a matching ROA that covers the prefix and origin ASN.

  • invalid - The route has a ROA for the prefix, but the origin ASN or prefix length does not match.

  • unknown - No ROA exists for the prefix, so RPKI validation cannot be performed.

rpki_strength class-attribute instance-attribute
rpki_strength: str | None = ...

The RPKI enforcement strength for the route. Possible values:

  • strict - Invalid routes are rejected.

  • permissive - Invalid routes are accepted but flagged.

sample_time class-attribute instance-attribute
sample_time: datetime | None = ...

The time when the route was last sampled.

state class-attribute instance-attribute
state: str | None = ...

The state of the BYOIP CIDR. Possible values:

  • advertised - The CIDR is being advertised.

  • deprovisioned - The CIDR has been deprovisioned.

  • failed-deprovision - Deprovisioning failed.

  • failed-provision - Provisioning failed.

  • pending-deprovision - Deprovisioning is in progress.

  • pending-provision - Provisioning is in progress.

  • provisioned - The CIDR is provisioned.

  • provisioned-not-publicly-advertisable - The CIDR is provisioned but not publicly advertisable.