Package software.amazon.awscdk.services.ec2

Interface CfnVPCEncryptionControlProps

All Superinterfaces:

software.amazon.jsii.JsiiSerializable

All Known Implementing Classes:

CfnVPCEncryptionControlProps.Jsii$Proxy

@Generated(value="jsii-pacmak/1.119.0 (build 1634eac)",
           date="2025-12-01T16:02:19.268Z")
@Stability(Stable)
public interface CfnVPCEncryptionControlProps
extends software.amazon.jsii.JsiiSerializable

Properties for defining a CfnVPCEncryptionControl.

Example:

 // The code below shows an example of how to instantiate this type.
 // The values are placeholders you should change.
 import software.amazon.awscdk.services.ec2.*;
 CfnVPCEncryptionControlProps cfnVPCEncryptionControlProps = CfnVPCEncryptionControlProps.builder()
         .egressOnlyInternetGatewayExclusionInput("egressOnlyInternetGatewayExclusionInput")
         .elasticFileSystemExclusionInput("elasticFileSystemExclusionInput")
         .internetGatewayExclusionInput("internetGatewayExclusionInput")
         .lambdaExclusionInput("lambdaExclusionInput")
         .mode("mode")
         .natGatewayExclusionInput("natGatewayExclusionInput")
         .tags(List.of(CfnTag.builder()
                 .key("key")
                 .value("value")
                 .build()))
         .virtualPrivateGatewayExclusionInput("virtualPrivateGatewayExclusionInput")
         .vpcId("vpcId")
         .vpcLatticeExclusionInput("vpcLatticeExclusionInput")
         .vpcPeeringExclusionInput("vpcPeeringExclusionInput")
         .build();
 

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html

Nested Class Summary

Nested Classes

Modifier and Type	Interface	Description
static final class	CfnVPCEncryptionControlProps.Builder	A builder for CfnVPCEncryptionControlProps
static final class	CfnVPCEncryptionControlProps.Jsii$Proxy	An implementation for CfnVPCEncryptionControlProps

Method Summary

Modifier and Type	Method	Description
static CfnVPCEncryptionControlProps.Builder	builder()
default String	getEgressOnlyInternetGatewayExclusionInput()	Specifies whether to exclude egress-only internet gateway traffic from encryption enforcement.
default String	getElasticFileSystemExclusionInput()	Specifies whether to exclude Elastic File System traffic from encryption enforcement.
default String	getInternetGatewayExclusionInput()	Specifies whether to exclude internet gateway traffic from encryption enforcement.
default String	getLambdaExclusionInput()	Specifies whether to exclude Lambda function traffic from encryption enforcement.
default String	getMode()	The encryption mode for the VPC Encryption Control configuration.
default String	getNatGatewayExclusionInput()	Specifies whether to exclude NAT gateway traffic from encryption enforcement.
default List<CfnTag>	getTags()	The tags assigned to the VPC Encryption Control configuration.
default String	getVirtualPrivateGatewayExclusionInput()	Specifies whether to exclude virtual private gateway traffic from encryption enforcement.
default String	getVpcId()	The ID of the VPC for which to create the encryption control configuration.
default String	getVpcLatticeExclusionInput()	Specifies whether to exclude VPC Lattice traffic from encryption enforcement.
default String	getVpcPeeringExclusionInput()	Specifies whether to exclude VPC peering connection traffic from encryption enforcement.

Methods inherited from interface software.amazon.jsii.JsiiSerializable

$jsii$toJson

Method Details

getEgressOnlyInternetGatewayExclusionInput

@Stability(Stable)
@Nullable
default String getEgressOnlyInternetGatewayExclusionInput()

Specifies whether to exclude egress-only internet gateway traffic from encryption enforcement.

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html#cfn-ec2-vpcencryptioncontrol-egressonlyinternetgatewayexclusioninput

getElasticFileSystemExclusionInput

@Stability(Stable)
@Nullable
default String getElasticFileSystemExclusionInput()

Specifies whether to exclude Elastic File System traffic from encryption enforcement.

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html#cfn-ec2-vpcencryptioncontrol-elasticfilesystemexclusioninput

getInternetGatewayExclusionInput

@Stability(Stable)
@Nullable
default String getInternetGatewayExclusionInput()

Specifies whether to exclude internet gateway traffic from encryption enforcement.

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html#cfn-ec2-vpcencryptioncontrol-internetgatewayexclusioninput

getLambdaExclusionInput

@Stability(Stable)
@Nullable
default String getLambdaExclusionInput()

Specifies whether to exclude Lambda function traffic from encryption enforcement.

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html#cfn-ec2-vpcencryptioncontrol-lambdaexclusioninput

getMode

@Stability(Stable)
@Nullable
default String getMode()

The encryption mode for the VPC Encryption Control configuration.

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html#cfn-ec2-vpcencryptioncontrol-mode

getNatGatewayExclusionInput

@Stability(Stable)
@Nullable
default String getNatGatewayExclusionInput()

Specifies whether to exclude NAT gateway traffic from encryption enforcement.

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html#cfn-ec2-vpcencryptioncontrol-natgatewayexclusioninput

getTags

@Stability(Stable)
@Nullable
default List<CfnTag> getTags()

The tags assigned to the VPC Encryption Control configuration.

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html#cfn-ec2-vpcencryptioncontrol-tags

getVirtualPrivateGatewayExclusionInput

@Stability(Stable)
@Nullable
default String getVirtualPrivateGatewayExclusionInput()

Specifies whether to exclude virtual private gateway traffic from encryption enforcement.

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html#cfn-ec2-vpcencryptioncontrol-virtualprivategatewayexclusioninput

getVpcId

@Stability(Stable)
@Nullable
default String getVpcId()

The ID of the VPC for which to create the encryption control configuration.

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html#cfn-ec2-vpcencryptioncontrol-vpcid

getVpcLatticeExclusionInput

@Stability(Stable)
@Nullable
default String getVpcLatticeExclusionInput()

Specifies whether to exclude VPC Lattice traffic from encryption enforcement.

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html#cfn-ec2-vpcencryptioncontrol-vpclatticeexclusioninput

getVpcPeeringExclusionInput

@Stability(Stable)
@Nullable
default String getVpcPeeringExclusionInput()

Specifies whether to exclude VPC peering connection traffic from encryption enforcement.

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html#cfn-ec2-vpcencryptioncontrol-vpcpeeringexclusioninput

builder

@Stability(Stable)
static CfnVPCEncryptionControlProps.Builder builder()

Returns:

a CfnVPCEncryptionControlProps.Builder of CfnVPCEncryptionControlProps