aws-cdk-lib.aws_ec2.CfnSubnet.BlockPublicAccessStatesProperty

BlockPublicAccessStatesProperty Struct

Specifies the state of VPC Block Public Access (BPA).

Source

Generated code

Type last changed

v2.202.0 · 20 Jun 2025

Example

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_ec2 as ec2 } from 'aws-cdk-lib';
const blockPublicAccessStatesProperty: ec2.CfnSubnet.BlockPublicAccessStatesProperty = {
  internetGatewayBlockMode: 'internetGatewayBlockMode',
};

Properties

internetGatewayBlockMode?optionalstringinternet_gateway_block_mode?optionalstrinternetGatewayBlockMode?optionalStringInternetGatewayBlockMode?optionalstringInternetGatewayBlockMode?optional*string#

The mode of VPC BPA.

notes

• off : VPC BPA is not enabled and traffic is allowed to and from internet gateways and egress-only internet gateways in this Region.
• block-bidirectional : Block all traffic to and from internet gateways and egress-only internet gateways in this Region (except for excluded VPCs and subnets).
• block-ingress : Block all internet traffic to the VPCs in this Region (except for VPCs or subnets which are excluded). Only traffic to and from NAT gateways and egress-only internet gateways is allowed because these gateways only allow outbound connections to be established.