Modifies the encryption control configuration for a VPC¶

Description¶

Modifies the encryption control configuration for a VPC. You can update the encryption mode and exclusion settings for various gateway types and peering connections.

For more information, see Enforce VPC encryption in transit in the Amazon VPC User Guide.

Usage¶

ec2_modify_vpc_encryption_control(DryRun, VpcEncryptionControlId, Mode,
  InternetGatewayExclusion, EgressOnlyInternetGatewayExclusion,
  NatGatewayExclusion, VirtualPrivateGatewayExclusion,
  VpcPeeringExclusion, LambdaExclusion, VpcLatticeExclusion,
  ElasticFileSystemExclusion)

Arguments¶

DryRun

Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
VpcEncryptionControlId

[required] The ID of the VPC Encryption Control resource to modify.
Mode

The encryption mode for the VPC Encryption Control configuration.
InternetGatewayExclusion

Specifies whether to exclude internet gateway traffic from encryption enforcement.
EgressOnlyInternetGatewayExclusion

Specifies whether to exclude egress-only internet gateway traffic from encryption enforcement.
NatGatewayExclusion

Specifies whether to exclude NAT gateway traffic from encryption enforcement.
VirtualPrivateGatewayExclusion

Specifies whether to exclude virtual private gateway traffic from encryption enforcement.
VpcPeeringExclusion

Specifies whether to exclude VPC peering connection traffic from encryption enforcement.
LambdaExclusion

Specifies whether to exclude Lambda function traffic from encryption enforcement.
VpcLatticeExclusion

Specifies whether to exclude VPC Lattice traffic from encryption enforcement.
ElasticFileSystemExclusion

Specifies whether to exclude Elastic File System traffic from encryption enforcement.

Value¶

A list with the following syntax:

list(
  VpcEncryptionControl = list(
    VpcId = "string",
    VpcEncryptionControlId = "string",
    Mode = "monitor"|"enforce",
    State = "enforce-in-progress"|"monitor-in-progress"|"enforce-failed"|"monitor-failed"|"deleting"|"deleted"|"available"|"creating"|"delete-failed",
    StateMessage = "string",
    ResourceExclusions = list(
      InternetGateway = list(
        State = "enabling"|"enabled"|"disabling"|"disabled",
        StateMessage = "string"
      ),
      EgressOnlyInternetGateway = list(
        State = "enabling"|"enabled"|"disabling"|"disabled",
        StateMessage = "string"
      ),
      NatGateway = list(
        State = "enabling"|"enabled"|"disabling"|"disabled",
        StateMessage = "string"
      ),
      VirtualPrivateGateway = list(
        State = "enabling"|"enabled"|"disabling"|"disabled",
        StateMessage = "string"
      ),
      VpcPeering = list(
        State = "enabling"|"enabled"|"disabling"|"disabled",
        StateMessage = "string"
      ),
      Lambda = list(
        State = "enabling"|"enabled"|"disabling"|"disabled",
        StateMessage = "string"
      ),
      VpcLattice = list(
        State = "enabling"|"enabled"|"disabling"|"disabled",
        StateMessage = "string"
      ),
      ElasticFileSystem = list(
        State = "enabling"|"enabled"|"disabling"|"disabled",
        StateMessage = "string"
      )
    ),
    Tags = list(
      list(
        Key = "string",
        Value = "string"
      )
    )
  )
)

Request syntax¶

svc$modify_vpc_encryption_control(
  DryRun = TRUE|FALSE,
  VpcEncryptionControlId = "string",
  Mode = "monitor"|"enforce",
  InternetGatewayExclusion = "enable"|"disable",
  EgressOnlyInternetGatewayExclusion = "enable"|"disable",
  NatGatewayExclusion = "enable"|"disable",
  VirtualPrivateGatewayExclusion = "enable"|"disable",
  VpcPeeringExclusion = "enable"|"disable",
  LambdaExclusion = "enable"|"disable",
  VpcLatticeExclusion = "enable"|"disable",
  ElasticFileSystemExclusion = "enable"|"disable"
)