VpcEncryptionControl class

Manages a VPC Encryption Control.

Example Usage

Basic Usage

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const exampleVpc = new aws.ec2.Vpc("example", {cidrBlock: "10.1.0.0/16"});
const example = new aws.ec2.VpcEncryptionControl("example", {
    vpcId: exampleVpc.id,
    mode: "monitor",
});
import pulumi
import pulumi_aws as aws

example_vpc = aws.ec2.Vpc("example", cidr_block="10.1.0.0/16")
example = aws.ec2.VpcEncryptionControl("example",
    vpc_id=example_vpc.id,
    mode="monitor")
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() =>
{
    var exampleVpc = new Aws.Ec2.Vpc("example", new()
    {
        CidrBlock = "10.1.0.0/16",
    });

    var example = new Aws.Ec2.VpcEncryptionControl("example", new()
    {
        VpcId = exampleVpc.Id,
        Mode = "monitor",
    });

});
package main

import (
	"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/ec2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		exampleVpc, err := ec2.NewVpc(ctx, "example", &ec2.VpcArgs{
			CidrBlock: pulumi.String("10.1.0.0/16"),
		})
		if err != nil {
			return err
		}
		_, err = ec2.NewVpcEncryptionControl(ctx, "example", &ec2.VpcEncryptionControlArgs{
			VpcId: exampleVpc.ID().ToIDOutput().ToStringOutput(),
			Mode:  pulumi.String("monitor"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
pulumi {
  required_providers {
    aws = {
      source = "pulumi/aws"
    }
  }
}

resource "aws_ec2_vpcencryptioncontrol" "example" {
  vpc_id = aws_ec2_vpc.example.id
  mode   = "monitor"
}
resource "aws_ec2_vpc" "example" {
  cidr_block = "10.1.0.0/16"
}
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.ec2.Vpc;
import com.pulumi.aws.ec2.VpcArgs;
import com.pulumi.aws.ec2.VpcEncryptionControl;
import com.pulumi.aws.ec2.VpcEncryptionControlArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var exampleVpc = new Vpc("exampleVpc", VpcArgs.builder()
            .cidrBlock("10.1.0.0/16")
            .build());

        var example = new VpcEncryptionControl("example", VpcEncryptionControlArgs.builder()
            .vpcId(exampleVpc.id())
            .mode("monitor")
            .build());

    }
}
resources:
  example:
    type: aws:ec2:VpcEncryptionControl
    properties:
      vpcId: ${exampleVpc.id}
      mode: monitor
  exampleVpc:
    type: aws:ec2:Vpc
    name: example
    properties:
      cidrBlock: 10.1.0.0/16

Import

Identity Schema

Required

  • id (String) VPC Encryption Control ID.

Optional

  • accountId (String) Account ID where this resource is managed.
  • region (String) Region where this resource is managed.

Using pulumi import, import VPC Encryption Control using the id. For example:

$ pulumi import aws:ec2/vpcEncryptionControl:VpcEncryptionControl example vpcec-12345678901234567

Constructors

VpcEncryptionControl(String name, {VpcEncryptionControlArgs? args, CustomResourceOptions? options})
Creates a new VpcEncryptionControl. name The Pulumi resource name. args Arguments used to configure this VpcEncryptionControl. The set of arguments for VpcEncryptionControl. options Resource options controlling this resource's behavior.
VpcEncryptionControl.reference(String urn)
Creates a typed reference to an existing VpcEncryptionControl resource.

Properties

childResources Set<Resource>
finalinherited
completionSources Map<String, IOutputCompletionSource>
latefinalinherited
egressOnlyInternetGatewayExclusion ↔ Output<String>
Whether to exclude Egress-Only Internet Gateways from encryption enforcement. Valid values are disable or enable. Default is disable. Only valid when mode is enforce.
latefinal
elasticFileSystemExclusion ↔ Output<String>
Whether to exclude Elastic File System (EFS) from encryption enforcement. Valid values are disable or enable. Default is disable. Only valid when mode is enforce.
latefinal
hashCode int
The hash code for this object.
no setterinherited
id ↔ Output<String>
getter/setter pairinherited
internetGatewayExclusion ↔ Output<String>
Whether to exclude Internet Gateways from encryption enforcement. Valid values are disable or enable. Default is disable. Only valid when mode is enforce.
latefinal
isCustom bool
Returns whether this resource is provider-managed.
no setterinherited
isProtected bool
Returns whether this resource is protected from deletion.
no setterinherited
isRemote bool
Whether this resource is registered as remote.
no setterinherited
isResourceReference bool
Whether this instance represents a resource value returned over RPC.
finalinherited
lambdaExclusion ↔ Output<String>
Whether to exclude Lambda Functions from encryption enforcement. Valid values are disable or enable. Default is disable. Only valid when mode is enforce.
latefinal
mode ↔ Output<String>
Mode to enable for VPC Encryption Control. Valid values are monitor or enforce.
latefinal
natGatewayExclusion ↔ Output<String>
Whether to exclude NAT Gateways from encryption enforcement. Valid values are disable or enable. Default is disable. Only valid when mode is enforce.
latefinal
region ↔ Output<String>
Region where this resource will be managed. Defaults to the Region set in the provider configuration.
latefinal
resourceExclusions ↔ Output<VpcEncryptionControlResourceExclusions>
State of exclusions from encryption enforcement. Will be nil if mode is monitor. See resourceExclusions below
latefinal
resourceTransforms List<ResourceTransform>
Inherited/explicit async transforms.
no setterinherited
runtimeType Type
A representation of the runtime type of the object.
no setterinherited
state ↔ Output<String>
The current state of the VPC Encryption Control.
latefinal
stateMessage ↔ Output<String>
A message providing additional information about the state of the VPC Encryption Control.
latefinal
tags ↔ Output<Map<String, String>?>
A map of tags to assign to the resource. If configured with a provider defaultTags configuration block present, tags with matching keys will overwrite those defined at the provider-level.
latefinal
tagsAll ↔ Output<Map<String, String>>
A map of tags assigned to the resource, including those inherited from the provider defaultTags configuration block.
latefinal
timeouts ↔ Output<VpcEncryptionControlTimeouts?>
latefinal
transformations List<ResourceTransformation>
Inherited/explicit legacy transformations.
no setterinherited
urn ↔ Output<String>
latefinalinherited
virtualPrivateGatewayExclusion ↔ Output<String>
Whether to exclude Virtual Private Gateways from encryption enforcement. Valid values are disable or enable. Default is disable. Only valid when mode is enforce.
latefinal
vpcId ↔ Output<String>
The ID of the VPC the VPC Encryption Control is linked to.
latefinal
vpcLatticeExclusion ↔ Output<String>
Whether to exclude VPC Lattice from encryption enforcement. Valid values are disable or enable. Default is disable. Only valid when mode is enforce.
latefinal
vpcPeeringExclusion ↔ Output<String>
Whether to exclude peered VPCs from encryption enforcement. Valid values are disable or enable. Default is disable. Only valid when mode is enforce.
latefinal

Methods

failId(Object error) → void
Completes this resource ID with an error when registration fails.
inherited
failOutputs(Object error) → void
Completes all output properties with error.
inherited
failUrn(Object error) → void
Completes this resource URN with an error when registration fails.
inherited
getProvider(String moduleMember) → ProviderResource?
Returns provider for moduleMember's package, if configured.
inherited
getResourceName() String
Returns this resource's logical name.
inherited
getResourceType() String
Returns this resource's Pulumi type token.
inherited
noSuchMethod(Invocation invocation) → dynamic
Invoked when a nonexistent method or property is accessed.
inherited
registerOutput<T>(String propertyName, {Object? decoder(Object?)?, bool isSecret = false}) → Output<T>
Registers a dynamic output property for this resource.
inherited
resolveId(String? value, {required bool isKnown}) → void
Resolves the provider-assigned ID for this resource.
inherited
resolveOutputs(Struct outputs) → void
Resolves all output properties from a monitor response payload.
inherited
resolveUrn(String value) → void
Resolves this resource's URN once assigned by the engine.
inherited
serializeProperties(Map<String, dynamic> properties) Future<Struct>
Serializes resource properties for RPC transmission.
inherited
toString() String
A string representation of this object.
inherited

Operators

operator ==(Object other) bool
The equality operator.
inherited

Static Methods

get(String name, Input<String> id, {VpcEncryptionControlState? state, CustomResourceOptions? options}) VpcEncryptionControl
Gets an existing VpcEncryptionControl resource's state with the given name and id.