VpcEncryptionControl class
Manages a VPC Encryption Control.
Example Usage
Basic Usage
import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";
const exampleVpc = new aws.ec2.Vpc("example", {cidrBlock: "10.1.0.0/16"});
const example = new aws.ec2.VpcEncryptionControl("example", {
vpcId: exampleVpc.id,
mode: "monitor",
});
import pulumi
import pulumi_aws as aws
example_vpc = aws.ec2.Vpc("example", cidr_block="10.1.0.0/16")
example = aws.ec2.VpcEncryptionControl("example",
vpc_id=example_vpc.id,
mode="monitor")
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;
return await Deployment.RunAsync(() =>
{
var exampleVpc = new Aws.Ec2.Vpc("example", new()
{
CidrBlock = "10.1.0.0/16",
});
var example = new Aws.Ec2.VpcEncryptionControl("example", new()
{
VpcId = exampleVpc.Id,
Mode = "monitor",
});
});
package main
import (
"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/ec2"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
exampleVpc, err := ec2.NewVpc(ctx, "example", &ec2.VpcArgs{
CidrBlock: pulumi.String("10.1.0.0/16"),
})
if err != nil {
return err
}
_, err = ec2.NewVpcEncryptionControl(ctx, "example", &ec2.VpcEncryptionControlArgs{
VpcId: exampleVpc.ID().ToIDOutput().ToStringOutput(),
Mode: pulumi.String("monitor"),
})
if err != nil {
return err
}
return nil
})
}
pulumi {
required_providers {
aws = {
source = "pulumi/aws"
}
}
}
resource "aws_ec2_vpcencryptioncontrol" "example" {
vpc_id = aws_ec2_vpc.example.id
mode = "monitor"
}
resource "aws_ec2_vpc" "example" {
cidr_block = "10.1.0.0/16"
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.ec2.Vpc;
import com.pulumi.aws.ec2.VpcArgs;
import com.pulumi.aws.ec2.VpcEncryptionControl;
import com.pulumi.aws.ec2.VpcEncryptionControlArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var exampleVpc = new Vpc("exampleVpc", VpcArgs.builder()
.cidrBlock("10.1.0.0/16")
.build());
var example = new VpcEncryptionControl("example", VpcEncryptionControlArgs.builder()
.vpcId(exampleVpc.id())
.mode("monitor")
.build());
}
}
resources:
example:
type: aws:ec2:VpcEncryptionControl
properties:
vpcId: ${exampleVpc.id}
mode: monitor
exampleVpc:
type: aws:ec2:Vpc
name: example
properties:
cidrBlock: 10.1.0.0/16
Import
Identity Schema
Required
id(String) VPC Encryption Control ID.
Optional
accountId(String) Account ID where this resource is managed.region(String) Region where this resource is managed.
Using pulumi import, import VPC Encryption Control using the id. For example:
$ pulumi import aws:ec2/vpcEncryptionControl:VpcEncryptionControl example vpcec-12345678901234567
Constructors
- VpcEncryptionControl(String name, {VpcEncryptionControlArgs? args, CustomResourceOptions? options})
-
Creates a new VpcEncryptionControl.
nameThe Pulumi resource name.argsArguments used to configure this VpcEncryptionControl. The set of arguments for VpcEncryptionControl.optionsResource options controlling this resource's behavior. - VpcEncryptionControl.reference(String urn)
- Creates a typed reference to an existing VpcEncryptionControl resource.
Properties
-
childResources
→ Set<
Resource> -
finalinherited
-
completionSources
↔ Map<
String, IOutputCompletionSource> -
latefinalinherited
-
egressOnlyInternetGatewayExclusion
↔ Output<
String> -
Whether to exclude Egress-Only Internet Gateways from encryption enforcement.
Valid values are
disableorenable. Default isdisable. Only valid whenmodeisenforce.latefinal -
elasticFileSystemExclusion
↔ Output<
String> -
Whether to exclude Elastic File System (EFS) from encryption enforcement.
Valid values are
disableorenable. Default isdisable. Only valid whenmodeisenforce.latefinal - hashCode → int
-
The hash code for this object.
no setterinherited
-
id
↔ Output<
String> -
getter/setter pairinherited
-
internetGatewayExclusion
↔ Output<
String> -
Whether to exclude Internet Gateways from encryption enforcement.
Valid values are
disableorenable. Default isdisable. Only valid whenmodeisenforce.latefinal - isCustom → bool
-
Returns whether this resource is provider-managed.
no setterinherited
- isProtected → bool
-
Returns whether this resource is protected from deletion.
no setterinherited
- isRemote → bool
-
Whether this resource is registered as remote.
no setterinherited
- isResourceReference → bool
-
Whether this instance represents a resource value returned over RPC.
finalinherited
-
lambdaExclusion
↔ Output<
String> -
Whether to exclude Lambda Functions from encryption enforcement.
Valid values are
disableorenable. Default isdisable. Only valid whenmodeisenforce.latefinal -
mode
↔ Output<
String> -
Mode to enable for VPC Encryption Control.
Valid values are
monitororenforce.latefinal -
natGatewayExclusion
↔ Output<
String> -
Whether to exclude NAT Gateways from encryption enforcement.
Valid values are
disableorenable. Default isdisable. Only valid whenmodeisenforce.latefinal -
region
↔ Output<
String> -
Region where this resource will be managed. Defaults to the Region set in the provider configuration.
latefinal
-
resourceExclusions
↔ Output<
VpcEncryptionControlResourceExclusions> -
State of exclusions from encryption enforcement.
Will be
nilifmodeismonitor. SeeresourceExclusionsbelowlatefinal -
resourceTransforms
→ List<
ResourceTransform> -
Inherited/explicit async transforms.
no setterinherited
- runtimeType → Type
-
A representation of the runtime type of the object.
no setterinherited
-
state
↔ Output<
String> -
The current state of the VPC Encryption Control.
latefinal
-
stateMessage
↔ Output<
String> -
A message providing additional information about the state of the VPC Encryption Control.
latefinal
-
A map of tags to assign to the resource. If configured with a provider
defaultTagsconfiguration block present, tags with matching keys will overwrite those defined at the provider-level.latefinal -
A map of tags assigned to the resource, including those inherited from the provider
defaultTagsconfiguration block.latefinal -
timeouts
↔ Output<
VpcEncryptionControlTimeouts?> -
latefinal
-
transformations
→ List<
ResourceTransformation> -
Inherited/explicit legacy transformations.
no setterinherited
-
urn
↔ Output<
String> -
latefinalinherited
-
virtualPrivateGatewayExclusion
↔ Output<
String> -
Whether to exclude Virtual Private Gateways from encryption enforcement.
Valid values are
disableorenable. Default isdisable. Only valid whenmodeisenforce.latefinal -
vpcId
↔ Output<
String> -
The ID of the VPC the VPC Encryption Control is linked to.
latefinal
-
vpcLatticeExclusion
↔ Output<
String> -
Whether to exclude VPC Lattice from encryption enforcement.
Valid values are
disableorenable. Default isdisable. Only valid whenmodeisenforce.latefinal -
vpcPeeringExclusion
↔ Output<
String> -
Whether to exclude peered VPCs from encryption enforcement.
Valid values are
disableorenable. Default isdisable. Only valid whenmodeisenforce.latefinal
Methods
-
failId(
Object error) → void -
Completes this resource ID with an error when registration fails.
inherited
-
failOutputs(
Object error) → void -
Completes all output properties with
error.inherited -
failUrn(
Object error) → void -
Completes this resource URN with an error when registration fails.
inherited
-
getProvider(
String moduleMember) → ProviderResource? -
Returns provider for
moduleMember's package, if configured.inherited -
getResourceName(
) → String -
Returns this resource's logical name.
inherited
-
getResourceType(
) → String -
Returns this resource's Pulumi type token.
inherited
-
noSuchMethod(
Invocation invocation) → dynamic -
Invoked when a nonexistent method or property is accessed.
inherited
-
registerOutput<
T> (String propertyName, {Object? decoder(Object?)?, bool isSecret = false}) → Output< T> -
Registers a dynamic output property for this resource.
inherited
-
resolveId(
String? value, {required bool isKnown}) → void -
Resolves the provider-assigned ID for this resource.
inherited
-
resolveOutputs(
Struct outputs) → void -
Resolves all output properties from a monitor response payload.
inherited
-
resolveUrn(
String value) → void -
Resolves this resource's URN once assigned by the engine.
inherited
-
serializeProperties(
Map< String, dynamic> properties) → Future<Struct> -
Serializes resource properties for RPC transmission.
inherited
-
toString(
) → String -
A string representation of this object.
inherited
Operators
-
operator ==(
Object other) → bool -
The equality operator.
inherited
Static Methods
-
get(
String name, Input< String> id, {VpcEncryptionControlState? state, CustomResourceOptions? options}) → VpcEncryptionControl -
Gets an existing VpcEncryptionControl resource's state with the given
nameandid.