CfnVPCEncryptionControlPropsMixin

class aws_cdk.mixins_preview.aws_ec2.mixins.CfnVPCEncryptionControlPropsMixin(props, *, strategy=None)

Bases: Mixin

Describes the configuration and state of VPC encryption controls.

For more information, see Enforce VPC encryption in transit in the Amazon VPC User Guide .

See:: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpcencryptioncontrol.html
CloudformationResource:: AWS::EC2::VPCEncryptionControl
Mixin:: true
ExampleMetadata:: fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.mixins_preview import mixins
from aws_cdk.mixins_preview.aws_ec2 import mixins as ec2_mixins

cfn_vPCEncryption_control_props_mixin = ec2_mixins.CfnVPCEncryptionControlPropsMixin(ec2_mixins.CfnVPCEncryptionControlMixinProps(
    egress_only_internet_gateway_exclusion_input="egressOnlyInternetGatewayExclusionInput",
    elastic_file_system_exclusion_input="elasticFileSystemExclusionInput",
    internet_gateway_exclusion_input="internetGatewayExclusionInput",
    lambda_exclusion_input="lambdaExclusionInput",
    mode="mode",
    nat_gateway_exclusion_input="natGatewayExclusionInput",
    tags=[CfnTag(
        key="key",
        value="value"
    )],
    virtual_private_gateway_exclusion_input="virtualPrivateGatewayExclusionInput",
    vpc_id="vpcId",
    vpc_lattice_exclusion_input="vpcLatticeExclusionInput",
    vpc_peering_exclusion_input="vpcPeeringExclusionInput"
),
    strategy=mixins.PropertyMergeStrategy.OVERRIDE
)

Create a mixin to apply properties to AWS::EC2::VPCEncryptionControl.

Parameters:

props (Union[CfnVPCEncryptionControlMixinProps, Dict[str, Any]]) – L1 properties to apply.
strategy (Optional[PropertyMergeStrategy]) – (experimental) Strategy for merging nested properties. Default: - PropertyMergeStrategy.MERGE

Methods

apply_to(construct)

Apply the mixin properties to the construct.

Parameters:: construct (IConstruct)
Return type:: IConstruct

supports(construct)

Check if this mixin supports the given construct.

Parameters:: construct (IConstruct)
Return type:: bool

Attributes

CFN_PROPERTY_KEYS = ['egressOnlyInternetGatewayExclusionInput', 'elasticFileSystemExclusionInput', 'internetGatewayExclusionInput', 'lambdaExclusionInput', 'mode', 'natGatewayExclusionInput', 'tags', 'virtualPrivateGatewayExclusionInput', 'vpcId', 'vpcLatticeExclusionInput', 'vpcPeeringExclusionInput']

Static Methods

classmethod is_mixin(x)

(experimental) Checks if x is a Mixin.

Parameters:: x (Any) – Any object.
Return type:: bool
Returns:: true if x is an object created from a class which extends Mixin.
Stability:: experimental

ResourceExclusionsProperty

class CfnVPCEncryptionControlPropsMixin.ResourceExclusionsProperty(*, egress_only_internet_gateway=None, elastic_file_system=None, internet_gateway=None, lambda_=None, nat_gateway=None, virtual_private_gateway=None, vpc_lattice=None, vpc_peering=None)

Bases: object

Information about resource exclusions for the VPC Encryption Control configuration.

Parameters:

egress_only_internet_gateway (Union[IResolvable, VpcEncryptionControlExclusionProperty, Dict[str, Any], None]) – Specifies whether to exclude egress-only internet gateway traffic from encryption enforcement.
elastic_file_system (Union[IResolvable, VpcEncryptionControlExclusionProperty, Dict[str, Any], None]) – Specifies whether to exclude Elastic File System traffic from encryption enforcement.
internet_gateway (Union[IResolvable, VpcEncryptionControlExclusionProperty, Dict[str, Any], None]) – Specifies whether to exclude internet gateway traffic from encryption enforcement.
lambda – Specifies whether to exclude Lambda function traffic from encryption enforcement.
nat_gateway (Union[IResolvable, VpcEncryptionControlExclusionProperty, Dict[str, Any], None]) – Specifies whether to exclude NAT gateway traffic from encryption enforcement.
virtual_private_gateway (Union[IResolvable, VpcEncryptionControlExclusionProperty, Dict[str, Any], None]) – Specifies whether to exclude virtual private gateway traffic from encryption enforcement.
vpc_lattice (Union[IResolvable, VpcEncryptionControlExclusionProperty, Dict[str, Any], None]) – Specifies whether to exclude VPC Lattice traffic from encryption enforcement.
vpc_peering (Union[IResolvable, VpcEncryptionControlExclusionProperty, Dict[str, Any], None]) – Specifies whether to exclude VPC peering connection traffic from encryption enforcement.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-resourceexclusions.html

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.mixins_preview.aws_ec2 import mixins as ec2_mixins

resource_exclusions_property = ec2_mixins.CfnVPCEncryptionControlPropsMixin.ResourceExclusionsProperty(
    egress_only_internet_gateway=ec2_mixins.CfnVPCEncryptionControlPropsMixin.VpcEncryptionControlExclusionProperty(
        state="state",
        state_message="stateMessage"
    ),
    elastic_file_system=ec2_mixins.CfnVPCEncryptionControlPropsMixin.VpcEncryptionControlExclusionProperty(
        state="state",
        state_message="stateMessage"
    ),
    internet_gateway=ec2_mixins.CfnVPCEncryptionControlPropsMixin.VpcEncryptionControlExclusionProperty(
        state="state",
        state_message="stateMessage"
    ),
    lambda_=ec2_mixins.CfnVPCEncryptionControlPropsMixin.VpcEncryptionControlExclusionProperty(
        state="state",
        state_message="stateMessage"
    ),
    nat_gateway=ec2_mixins.CfnVPCEncryptionControlPropsMixin.VpcEncryptionControlExclusionProperty(
        state="state",
        state_message="stateMessage"
    ),
    virtual_private_gateway=ec2_mixins.CfnVPCEncryptionControlPropsMixin.VpcEncryptionControlExclusionProperty(
        state="state",
        state_message="stateMessage"
    ),
    vpc_lattice=ec2_mixins.CfnVPCEncryptionControlPropsMixin.VpcEncryptionControlExclusionProperty(
        state="state",
        state_message="stateMessage"
    ),
    vpc_peering=ec2_mixins.CfnVPCEncryptionControlPropsMixin.VpcEncryptionControlExclusionProperty(
        state="state",
        state_message="stateMessage"
    )
)

Attributes

egress_only_internet_gateway

Specifies whether to exclude egress-only internet gateway traffic from encryption enforcement.

See:: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-resourceexclusions.html#cfn-ec2-vpcencryptioncontrol-resourceexclusions-egressonlyinternetgateway

elastic_file_system

Specifies whether to exclude Elastic File System traffic from encryption enforcement.

See:: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-resourceexclusions.html#cfn-ec2-vpcencryptioncontrol-resourceexclusions-elasticfilesystem

internet_gateway

Specifies whether to exclude internet gateway traffic from encryption enforcement.

See:: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-resourceexclusions.html#cfn-ec2-vpcencryptioncontrol-resourceexclusions-internetgateway

lambda_

Specifies whether to exclude Lambda function traffic from encryption enforcement.

See:: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-resourceexclusions.html#cfn-ec2-vpcencryptioncontrol-resourceexclusions-lambda

nat_gateway

Specifies whether to exclude NAT gateway traffic from encryption enforcement.

See:: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-resourceexclusions.html#cfn-ec2-vpcencryptioncontrol-resourceexclusions-natgateway

virtual_private_gateway

Specifies whether to exclude virtual private gateway traffic from encryption enforcement.

See:: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-resourceexclusions.html#cfn-ec2-vpcencryptioncontrol-resourceexclusions-virtualprivategateway

vpc_lattice

Specifies whether to exclude VPC Lattice traffic from encryption enforcement.

See:: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-resourceexclusions.html#cfn-ec2-vpcencryptioncontrol-resourceexclusions-vpclattice

vpc_peering

Specifies whether to exclude VPC peering connection traffic from encryption enforcement.

See:: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-resourceexclusions.html#cfn-ec2-vpcencryptioncontrol-resourceexclusions-vpcpeering

VpcEncryptionControlExclusionProperty

class CfnVPCEncryptionControlPropsMixin.VpcEncryptionControlExclusionProperty(*, state=None, state_message=None)

Bases: object

Describes an exclusion configuration for VPC Encryption Control.

For more information, see Enforce VPC encryption in transit in the Amazon VPC User Guide .

Parameters:

state (Optional[str]) – The current state of the exclusion configuration.
state_message (Optional[str]) – A message providing additional information about the exclusion state.

See:

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion.html

ExampleMetadata:

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
from aws_cdk.mixins_preview.aws_ec2 import mixins as ec2_mixins

vpc_encryption_control_exclusion_property = ec2_mixins.CfnVPCEncryptionControlPropsMixin.VpcEncryptionControlExclusionProperty(
    state="state",
    state_message="stateMessage"
)

Attributes

state

The current state of the exclusion configuration.

See:: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion.html#cfn-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion-state

state_message

A message providing additional information about the exclusion state.

See:: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion.html#cfn-ec2-vpcencryptioncontrol-vpcencryptioncontrolexclusion-statemessage