VpcEndpointConnectionNotification class

Provides a VPC Endpoint connection notification resource. Connection notifications notify subscribers of VPC Endpoint events.

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const topic = aws.iam.getPolicyDocument({
    statements: [{
        principals: [{
            type: "Service",
            identifiers: ["vpce.amazonaws.com"],
        }],
        effect: "Allow",
        actions: ["SNS:Publish"],
        resources: ["arn:aws:sns:*:*:vpce-notification-topic"],
    }],
});
const topicTopic = new aws.sns.Topic("topic", {
    name: "vpce-notification-topic",
    policy: topic.then(topic => topic.json),
});
const foo = new aws.ec2.VpcEndpointService("foo", {
    acceptanceRequired: false,
    networkLoadBalancerArns: [test.arn],
});
const fooVpcEndpointConnectionNotification = new aws.ec2.VpcEndpointConnectionNotification("foo", {
    vpcEndpointServiceId: foo.id,
    connectionNotificationArn: topicTopic.arn,
    connectionEvents: [
        "Accept",
        "Reject",
    ],
});

import pulumi
import pulumi_aws as aws

topic = aws.iam.get_policy_document(statements=[{
    "principals": [{
        "type": "Service",
        "identifiers": ["vpce.amazonaws.com"],
    }],
    "effect": "Allow",
    "actions": ["SNS:Publish"],
    "resources": ["arn:aws:sns:*:*:vpce-notification-topic"],
}])
topic_topic = aws.sns.Topic("topic",
    name="vpce-notification-topic",
    policy=topic.json)
foo = aws.ec2.VpcEndpointService("foo",
    acceptance_required=False,
    network_load_balancer_arns=[test["arn"]])
foo_vpc_endpoint_connection_notification = aws.ec2.VpcEndpointConnectionNotification("foo",
    vpc_endpoint_service_id=foo.id,
    connection_notification_arn=topic_topic.arn,
    connection_events=[
        "Accept",
        "Reject",
    ])

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() =>
{
    var topic = Aws.Iam.GetPolicyDocument.Invoke(new()
    {
        Statements = new[]
        {
            new Aws.Iam.Inputs.GetPolicyDocumentStatementInputArgs
            {
                Principals = new[]
                {
                    new Aws.Iam.Inputs.GetPolicyDocumentStatementPrincipalInputArgs
                    {
                        Type = "Service",
                        Identifiers = new[]
                        {
                            "vpce.amazonaws.com",
                        },
                    },
                },
                Effect = "Allow",
                Actions = new[]
                {
                    "SNS:Publish",
                },
                Resources = new[]
                {
                    "arn:aws:sns:*:*:vpce-notification-topic",
                },
            },
        },
    });

    var topicTopic = new Aws.Sns.Topic("topic", new()
    {
        Name = "vpce-notification-topic",
        Policy = topic.Apply(getPolicyDocumentResult => getPolicyDocumentResult.Json),
    });

    var foo = new Aws.Ec2.VpcEndpointService("foo", new()
    {
        AcceptanceRequired = false,
        NetworkLoadBalancerArns = new[]
        {
            test.Arn,
        },
    });

    var fooVpcEndpointConnectionNotification = new Aws.Ec2.VpcEndpointConnectionNotification("foo", new()
    {
        VpcEndpointServiceId = foo.Id,
        ConnectionNotificationArn = topicTopic.Arn,
        ConnectionEvents = new[]
        {
            "Accept",
            "Reject",
        },
    });

});

package main

import (
	"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/ec2"
	"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/iam"
	"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/sns"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		topic, err := iam.GetPolicyDocument(ctx, &iam.GetPolicyDocumentArgs{
			Statements: []iam.GetPolicyDocumentStatement{
				{
					Principals: []iam.GetPolicyDocumentStatementPrincipal{
						{
							Type: "Service",
							Identifiers: []string{
								"vpce.amazonaws.com",
							},
						},
					},
					Effect: pulumi.StringRef("Allow"),
					Actions: []string{
						"SNS:Publish",
					},
					Resources: []string{
						"arn:aws:sns:*:*:vpce-notification-topic",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		topicTopic, err := sns.NewTopic(ctx, "topic", &sns.TopicArgs{
			Name:   pulumi.String("vpce-notification-topic"),
			Policy: pulumi.String(topic.Json),
		})
		if err != nil {
			return err
		}
		foo, err := ec2.NewVpcEndpointService(ctx, "foo", &ec2.VpcEndpointServiceArgs{
			AcceptanceRequired: pulumi.Bool(false),
			NetworkLoadBalancerArns: pulumi.StringArray{
				test.Arn,
			},
		})
		if err != nil {
			return err
		}
		_, err = ec2.NewVpcEndpointConnectionNotification(ctx, "foo", &ec2.VpcEndpointConnectionNotificationArgs{
			VpcEndpointServiceId:      foo.ID().ToIDOutput().ToStringOutput(),
			ConnectionNotificationArn: topicTopic.Arn,
			ConnectionEvents: pulumi.StringArray{
				pulumi.String("Accept"),
				pulumi.String("Reject"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

pulumi {
  required_providers {
    aws = {
      source = "pulumi/aws"
    }
  }
}

data "aws_iam_getpolicydocument" "topic" {
  statements {
    principals {
      type        = "Service"
      identifiers = ["vpce.amazonaws.com"]
    }
    effect    = "Allow"
    actions   = ["SNS:Publish"]
    resources = ["arn:aws:sns:*:*:vpce-notification-topic"]
  }
}

resource "aws_sns_topic" "topic" {
  name   = "vpce-notification-topic"
  policy = data.aws_iam_getpolicydocument.topic.json
}
resource "aws_ec2_vpcendpointservice" "foo" {
  acceptance_required        = false
  network_load_balancer_arns = [test.arn]
}
resource "aws_ec2_vpcendpointconnectionnotification" "foo" {
  vpc_endpoint_service_id     = aws_ec2_vpcendpointservice.foo.id
  connection_notification_arn = aws_sns_topic.topic.arn
  connection_events           = ["Accept", "Reject"]
}

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.iam.IamFunctions;
import com.pulumi.aws.iam.inputs.GetPolicyDocumentArgs;
import com.pulumi.aws.iam.inputs.GetPolicyDocumentStatementArgs;
import com.pulumi.aws.iam.inputs.GetPolicyDocumentStatementPrincipalArgs;
import com.pulumi.aws.sns.Topic;
import com.pulumi.aws.sns.TopicArgs;
import com.pulumi.aws.ec2.VpcEndpointService;
import com.pulumi.aws.ec2.VpcEndpointServiceArgs;
import com.pulumi.aws.ec2.VpcEndpointConnectionNotification;
import com.pulumi.aws.ec2.VpcEndpointConnectionNotificationArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var topic = IamFunctions.getPolicyDocument(GetPolicyDocumentArgs.builder()
            .statements(GetPolicyDocumentStatementArgs.builder()
                .principals(GetPolicyDocumentStatementPrincipalArgs.builder()
                    .type("Service")
                    .identifiers("vpce.amazonaws.com")
                    .build())
                .effect("Allow")
                .actions("SNS:Publish")
                .resources("arn:aws:sns:*:*:vpce-notification-topic")
                .build())
            .build());

        var topicTopic = new Topic("topicTopic", TopicArgs.builder()
            .name("vpce-notification-topic")
            .policy(topic.json())
            .build());

        var foo = new VpcEndpointService("foo", VpcEndpointServiceArgs.builder()
            .acceptanceRequired(false)
            .networkLoadBalancerArns(test.arn())
            .build());

        var fooVpcEndpointConnectionNotification = new VpcEndpointConnectionNotification("fooVpcEndpointConnectionNotification", VpcEndpointConnectionNotificationArgs.builder()
            .vpcEndpointServiceId(foo.id())
            .connectionNotificationArn(topicTopic.arn())
            .connectionEvents(
                "Accept",
                "Reject")
            .build());

    }
}

resources:
  topicTopic:
    type: aws:sns:Topic
    name: topic
    properties:
      name: vpce-notification-topic
      policy: ${topic.json}
  foo:
    type: aws:ec2:VpcEndpointService
    properties:
      acceptanceRequired: false
      networkLoadBalancerArns:
        - ${test.arn}
  fooVpcEndpointConnectionNotification:
    type: aws:ec2:VpcEndpointConnectionNotification
    name: foo
    properties:
      vpcEndpointServiceId: ${foo.id}
      connectionNotificationArn: ${topicTopic.arn}
      connectionEvents:
        - Accept
        - Reject
variables:
  topic:
    fn::invoke:
      function: aws:iam:getPolicyDocument
      arguments:
        statements:
          - principals:
              - type: Service
                identifiers:
                  - vpce.amazonaws.com
            effect: Allow
            actions:
              - SNS:Publish
            resources:
              - arn:aws:sns:*:*:vpce-notification-topic

Import

Using pulumi import, import VPC Endpoint connection notifications using the VPC endpoint connection notification id. For example:

$ pulumi import aws:ec2/vpcEndpointConnectionNotification:VpcEndpointConnectionNotification foo vpce-nfn-09e6ed3b4efba2263