Skip to content

/AWS1/IF_EC2=>VLDTSECGROUPQUOTASFORIFACE()

About ValidateSecurityGroupQuotasForInterface

Validates whether the specified security groups can be associated with a single network interface. The operation checks Amazon Virtual Private Cloud (Amazon VPC) quotas. It checks inbound or outbound rules per security group and security groups per network interface. Only authorized AWS services can call this operation.

For more information about security group quotas, see Amazon VPC quotas in the Amazon VPC User Guide.

Method Signature

METHODS /AWS1/IF_EC2~VLDTSECGROUPQUOTASFORIFACE
  IMPORTING
    !IT_SECURITYGROUPIDS TYPE /AWS1/CL_EC2SECGROUPIDLIST_W=>TT_SECURITYGROUPIDLIST OPTIONAL
    !IV_DRYRUN TYPE /AWS1/EC2BOOLEAN OPTIONAL
  RETURNING
    VALUE(OO_OUTPUT) TYPE REF TO /aws1/cl_ec2vldtsecgrquotasf01
  RAISING
    /AWS1/CX_EC2CLIENTEXC
    /AWS1/CX_EC2SERVEREXC
    /AWS1/CX_RT_TECHNICAL_GENERIC
    /AWS1/CX_RT_SERVICE_GENERIC.

IMPORTING

Required arguments:

it_securitygroupids TYPE /AWS1/CL_EC2SECGROUPIDLIST_W=>TT_SECURITYGROUPIDLIST TT_SECURITYGROUPIDLIST

The IDs of the security groups to validate for association with a single network interface. You must specify at least one ID, and each ID must be unique. The number of IDs cannot exceed the maximum number of security groups allowed per network interface.

Optional arguments:

iv_dryrun TYPE /AWS1/EC2BOOLEAN /AWS1/EC2BOOLEAN

Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.

RETURNING

oo_output TYPE REF TO /aws1/cl_ec2vldtsecgrquotasf01 /AWS1/CL_EC2VLDTSECGRQUOTASF01

Examples

Syntax Example

This is an example of the syntax for calling the method. It includes every possible argument and initializes every possible value. The data provided is not necessarily semantically accurate (for example the value "string" may be provided for something that is intended to be an instance ID, or in some cases two arguments may be mutually exclusive). The syntax shows the ABAP syntax for creating the various data structures.

DATA(lo_result) = lo_client->vldtsecgroupquotasforiface(
  it_securitygroupids = VALUE /aws1/cl_ec2secgroupidlist_w=>tt_securitygroupidlist(
    ( new /aws1/cl_ec2secgroupidlist_w( |string| ) )
  )
  iv_dryrun = ABAP_TRUE
).

This is an example of reading all possible response values

lo_result = lo_result.
IF lo_result IS NOT INITIAL.
  lv_boolean = lo_result->get_valid( ).
ENDIF.