VpcBlockPublicAccessOptions¶
Structure Class¶
dataclass
¶
Bases: _SerdeShape
VPC Block Public Access (BPA) enables you to block resources in VPCs and subnets that you own in a Region from reaching or being reached from the internet through internet gateways and egress-only internet gateways. To learn more about VPC BPA, see Block public access to VPCs and subnets in the Amazon VPC User Guide.
Attributes¶
class-attribute
instance-attribute
¶
aws_account_id: str | None = ...
An Amazon Web Services account ID.
class-attribute
instance-attribute
¶
aws_region: str | None = ...
An Amazon Web Services Region.
class-attribute
instance-attribute
¶
exclusions_allowed: str | None = ...
Determines if exclusions are allowed. If you have enabled VPC BPA at
the Organization
level,
exclusions may be not-allowed. Otherwise, they are allowed.
class-attribute
instance-attribute
¶
internet_gateway_block_mode: str | None = ...
The current mode of VPC BPA.
-
off: VPC BPA is not enabled and traffic is allowed to and from internet gateways and egress-only internet gateways in this Region. -
block-bidirectional: Block all traffic to and from internet gateways and egress-only internet gateways in this Region (except for excluded VPCs and subnets). -
block-ingress: Block all internet traffic to the VPCs in this Region (except for VPCs or subnets which are excluded). Only traffic to and from NAT gateways and egress-only internet gateways is allowed because these gateways only allow outbound connections to be established.
class-attribute
instance-attribute
¶
last_update_timestamp: datetime | None = ...
The last time the VPC BPA mode was updated.
class-attribute
instance-attribute
¶
managed_by: str | None = ...
The entity that manages the state of VPC BPA. Possible values include:
-
account- The state is managed by the account. -
declarative-policy- The state is managed by a declarative policy and can't be modified by the account.