This is the new *CloudFormation Template Reference Guide*. Please update your bookmarks and links. For help getting started with CloudFormation, see the [AWS CloudFormation User Guide](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/Welcome.html).

# AWS::EC2::NetworkInsightsAccessScope
<a name="aws-resource-ec2-networkinsightsaccessscope"></a>

Describes a Network Access Scope. A Network Access Scope defines outbound (egress) and inbound (ingress) traffic patterns, including sources, destinations, paths, and traffic types.

Network Access Analyzer identifies unintended network access to your resources on AWS. When you start an analysis on a Network Access Scope, Network Access Analyzer produces findings. For more information, see the [Network Access Analyzer User Guide](https://docs.aws.amazon.com/vpc/latest/network-access-analyzer/).

## Syntax
<a name="aws-resource-ec2-networkinsightsaccessscope-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-resource-ec2-networkinsightsaccessscope-syntax.json"></a>

```
{
  "Type" : "AWS::EC2::NetworkInsightsAccessScope",
  "Properties" : {
      "[ExcludePaths](#cfn-ec2-networkinsightsaccessscope-excludepaths)" : [ AccessScopePathRequest, ... ],
      "[MatchPaths](#cfn-ec2-networkinsightsaccessscope-matchpaths)" : [ AccessScopePathRequest, ... ],
      "[Tags](#cfn-ec2-networkinsightsaccessscope-tags)" : [ Tag, ... ]
    }
}
```

### YAML
<a name="aws-resource-ec2-networkinsightsaccessscope-syntax.yaml"></a>

```
Type: AWS::EC2::NetworkInsightsAccessScope
Properties:
  [ExcludePaths](#cfn-ec2-networkinsightsaccessscope-excludepaths): 
    - AccessScopePathRequest
  [MatchPaths](#cfn-ec2-networkinsightsaccessscope-matchpaths): 
    - AccessScopePathRequest
  [Tags](#cfn-ec2-networkinsightsaccessscope-tags): 
    - Tag
```

## Properties
<a name="aws-resource-ec2-networkinsightsaccessscope-properties"></a>

`ExcludePaths`  <a name="cfn-ec2-networkinsightsaccessscope-excludepaths"></a>
The paths to exclude.  
*Required*: No  
*Type*: Array of [AccessScopePathRequest](aws-properties-ec2-networkinsightsaccessscope-accessscopepathrequest.md)  
*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)

`MatchPaths`  <a name="cfn-ec2-networkinsightsaccessscope-matchpaths"></a>
The paths to match.  
*Required*: No  
*Type*: Array of [AccessScopePathRequest](aws-properties-ec2-networkinsightsaccessscope-accessscopepathrequest.md)  
*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)

`Tags`  <a name="cfn-ec2-networkinsightsaccessscope-tags"></a>
The tags.  
*Required*: No  
*Type*: Array of [Tag](aws-properties-ec2-networkinsightsaccessscope-tag.md)  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

## Return values
<a name="aws-resource-ec2-networkinsightsaccessscope-return-values"></a>

### Ref
<a name="aws-resource-ec2-networkinsightsaccessscope-return-values-ref"></a>

When you pass the logical ID of this resource to the intrinsic `Ref` function, `Ref` returns the ID of the network insights scope.

For more information about using the `Ref` function, see [https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-ref.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-ref.html).

### Fn::GetAtt
<a name="aws-resource-ec2-networkinsightsaccessscope-return-values-fn--getatt"></a>

The `Fn::GetAtt` intrinsic function returns a value for a specified attribute of this type. The following are the available attributes and sample return values.

For more information about using the `Fn::GetAtt` intrinsic function, see [https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-getatt.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-getatt.html).

#### 
<a name="aws-resource-ec2-networkinsightsaccessscope-return-values-fn--getatt-fn--getatt"></a>

`CreatedDate`  <a name="CreatedDate-fn::getatt"></a>
The creation date.

`NetworkInsightsAccessScopeArn`  <a name="NetworkInsightsAccessScopeArn-fn::getatt"></a>
The ARN of the Network Access Scope.

`NetworkInsightsAccessScopeId`  <a name="NetworkInsightsAccessScopeId-fn::getatt"></a>
The ID of the Network Access Scope.

`UpdatedDate`  <a name="UpdatedDate-fn::getatt"></a>
The last updated date.

# AWS::EC2::NetworkInsightsAccessScope AccessScopePathRequest
<a name="aws-properties-ec2-networkinsightsaccessscope-accessscopepathrequest"></a>

Describes a path.

## Syntax
<a name="aws-properties-ec2-networkinsightsaccessscope-accessscopepathrequest-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-ec2-networkinsightsaccessscope-accessscopepathrequest-syntax.json"></a>

```
{
  "[Destination](#cfn-ec2-networkinsightsaccessscope-accessscopepathrequest-destination)" : PathStatementRequest,
  "[Source](#cfn-ec2-networkinsightsaccessscope-accessscopepathrequest-source)" : PathStatementRequest,
  "[ThroughResources](#cfn-ec2-networkinsightsaccessscope-accessscopepathrequest-throughresources)" : [ ThroughResourcesStatementRequest, ... ]
}
```

### YAML
<a name="aws-properties-ec2-networkinsightsaccessscope-accessscopepathrequest-syntax.yaml"></a>

```
  [Destination](#cfn-ec2-networkinsightsaccessscope-accessscopepathrequest-destination): 
    PathStatementRequest
  [Source](#cfn-ec2-networkinsightsaccessscope-accessscopepathrequest-source): 
    PathStatementRequest
  [ThroughResources](#cfn-ec2-networkinsightsaccessscope-accessscopepathrequest-throughresources): 
    - ThroughResourcesStatementRequest
```

## Properties
<a name="aws-properties-ec2-networkinsightsaccessscope-accessscopepathrequest-properties"></a>

`Destination`  <a name="cfn-ec2-networkinsightsaccessscope-accessscopepathrequest-destination"></a>
The destination.  
*Required*: No  
*Type*: [PathStatementRequest](aws-properties-ec2-networkinsightsaccessscope-pathstatementrequest.md)  
*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)

`Source`  <a name="cfn-ec2-networkinsightsaccessscope-accessscopepathrequest-source"></a>
The source.  
*Required*: No  
*Type*: [PathStatementRequest](aws-properties-ec2-networkinsightsaccessscope-pathstatementrequest.md)  
*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)

`ThroughResources`  <a name="cfn-ec2-networkinsightsaccessscope-accessscopepathrequest-throughresources"></a>
The through resources.  
*Required*: No  
*Type*: Array of [ThroughResourcesStatementRequest](aws-properties-ec2-networkinsightsaccessscope-throughresourcesstatementrequest.md)  
*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)

# AWS::EC2::NetworkInsightsAccessScope PacketHeaderStatementRequest
<a name="aws-properties-ec2-networkinsightsaccessscope-packetheaderstatementrequest"></a>

Describes a packet header statement.

## Syntax
<a name="aws-properties-ec2-networkinsightsaccessscope-packetheaderstatementrequest-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-ec2-networkinsightsaccessscope-packetheaderstatementrequest-syntax.json"></a>

```
{
  "[DestinationAddresses](#cfn-ec2-networkinsightsaccessscope-packetheaderstatementrequest-destinationaddresses)" : [ String, ... ],
  "[DestinationPorts](#cfn-ec2-networkinsightsaccessscope-packetheaderstatementrequest-destinationports)" : [ String, ... ],
  "[DestinationPrefixLists](#cfn-ec2-networkinsightsaccessscope-packetheaderstatementrequest-destinationprefixlists)" : [ String, ... ],
  "[Protocols](#cfn-ec2-networkinsightsaccessscope-packetheaderstatementrequest-protocols)" : [ String, ... ],
  "[SourceAddresses](#cfn-ec2-networkinsightsaccessscope-packetheaderstatementrequest-sourceaddresses)" : [ String, ... ],
  "[SourcePorts](#cfn-ec2-networkinsightsaccessscope-packetheaderstatementrequest-sourceports)" : [ String, ... ],
  "[SourcePrefixLists](#cfn-ec2-networkinsightsaccessscope-packetheaderstatementrequest-sourceprefixlists)" : [ String, ... ]
}
```

### YAML
<a name="aws-properties-ec2-networkinsightsaccessscope-packetheaderstatementrequest-syntax.yaml"></a>

```
  [DestinationAddresses](#cfn-ec2-networkinsightsaccessscope-packetheaderstatementrequest-destinationaddresses): 
    - String
  [DestinationPorts](#cfn-ec2-networkinsightsaccessscope-packetheaderstatementrequest-destinationports): 
    - String
  [DestinationPrefixLists](#cfn-ec2-networkinsightsaccessscope-packetheaderstatementrequest-destinationprefixlists): 
    - String
  [Protocols](#cfn-ec2-networkinsightsaccessscope-packetheaderstatementrequest-protocols): 
    - String
  [SourceAddresses](#cfn-ec2-networkinsightsaccessscope-packetheaderstatementrequest-sourceaddresses): 
    - String
  [SourcePorts](#cfn-ec2-networkinsightsaccessscope-packetheaderstatementrequest-sourceports): 
    - String
  [SourcePrefixLists](#cfn-ec2-networkinsightsaccessscope-packetheaderstatementrequest-sourceprefixlists): 
    - String
```

## Properties
<a name="aws-properties-ec2-networkinsightsaccessscope-packetheaderstatementrequest-properties"></a>

`DestinationAddresses`  <a name="cfn-ec2-networkinsightsaccessscope-packetheaderstatementrequest-destinationaddresses"></a>
The destination addresses.  
*Required*: No  
*Type*: Array of String  
*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)

`DestinationPorts`  <a name="cfn-ec2-networkinsightsaccessscope-packetheaderstatementrequest-destinationports"></a>
The destination ports.  
*Required*: No  
*Type*: Array of String  
*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)

`DestinationPrefixLists`  <a name="cfn-ec2-networkinsightsaccessscope-packetheaderstatementrequest-destinationprefixlists"></a>
The destination prefix lists.  
*Required*: No  
*Type*: Array of String  
*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)

`Protocols`  <a name="cfn-ec2-networkinsightsaccessscope-packetheaderstatementrequest-protocols"></a>
The protocols.  
*Required*: No  
*Type*: Array of String  
*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)

`SourceAddresses`  <a name="cfn-ec2-networkinsightsaccessscope-packetheaderstatementrequest-sourceaddresses"></a>
The source addresses.  
*Required*: No  
*Type*: Array of String  
*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)

`SourcePorts`  <a name="cfn-ec2-networkinsightsaccessscope-packetheaderstatementrequest-sourceports"></a>
The source ports.  
*Required*: No  
*Type*: Array of String  
*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)

`SourcePrefixLists`  <a name="cfn-ec2-networkinsightsaccessscope-packetheaderstatementrequest-sourceprefixlists"></a>
The source prefix lists.  
*Required*: No  
*Type*: Array of String  
*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)

# AWS::EC2::NetworkInsightsAccessScope PathStatementRequest
<a name="aws-properties-ec2-networkinsightsaccessscope-pathstatementrequest"></a>

Describes a path statement.

## Syntax
<a name="aws-properties-ec2-networkinsightsaccessscope-pathstatementrequest-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-ec2-networkinsightsaccessscope-pathstatementrequest-syntax.json"></a>

```
{
  "[PacketHeaderStatement](#cfn-ec2-networkinsightsaccessscope-pathstatementrequest-packetheaderstatement)" : PacketHeaderStatementRequest,
  "[ResourceStatement](#cfn-ec2-networkinsightsaccessscope-pathstatementrequest-resourcestatement)" : ResourceStatementRequest
}
```

### YAML
<a name="aws-properties-ec2-networkinsightsaccessscope-pathstatementrequest-syntax.yaml"></a>

```
  [PacketHeaderStatement](#cfn-ec2-networkinsightsaccessscope-pathstatementrequest-packetheaderstatement): 
    PacketHeaderStatementRequest
  [ResourceStatement](#cfn-ec2-networkinsightsaccessscope-pathstatementrequest-resourcestatement): 
    ResourceStatementRequest
```

## Properties
<a name="aws-properties-ec2-networkinsightsaccessscope-pathstatementrequest-properties"></a>

`PacketHeaderStatement`  <a name="cfn-ec2-networkinsightsaccessscope-pathstatementrequest-packetheaderstatement"></a>
The packet header statement.  
*Required*: No  
*Type*: [PacketHeaderStatementRequest](aws-properties-ec2-networkinsightsaccessscope-packetheaderstatementrequest.md)  
*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)

`ResourceStatement`  <a name="cfn-ec2-networkinsightsaccessscope-pathstatementrequest-resourcestatement"></a>
The resource statement.  
*Required*: No  
*Type*: [ResourceStatementRequest](aws-properties-ec2-networkinsightsaccessscope-resourcestatementrequest.md)  
*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)

# AWS::EC2::NetworkInsightsAccessScope ResourceStatementRequest
<a name="aws-properties-ec2-networkinsightsaccessscope-resourcestatementrequest"></a>

Describes a resource statement.

## Syntax
<a name="aws-properties-ec2-networkinsightsaccessscope-resourcestatementrequest-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-ec2-networkinsightsaccessscope-resourcestatementrequest-syntax.json"></a>

```
{
  "[Resources](#cfn-ec2-networkinsightsaccessscope-resourcestatementrequest-resources)" : [ String, ... ],
  "[ResourceTypes](#cfn-ec2-networkinsightsaccessscope-resourcestatementrequest-resourcetypes)" : [ String, ... ]
}
```

### YAML
<a name="aws-properties-ec2-networkinsightsaccessscope-resourcestatementrequest-syntax.yaml"></a>

```
  [Resources](#cfn-ec2-networkinsightsaccessscope-resourcestatementrequest-resources): 
    - String
  [ResourceTypes](#cfn-ec2-networkinsightsaccessscope-resourcestatementrequest-resourcetypes): 
    - String
```

## Properties
<a name="aws-properties-ec2-networkinsightsaccessscope-resourcestatementrequest-properties"></a>

`Resources`  <a name="cfn-ec2-networkinsightsaccessscope-resourcestatementrequest-resources"></a>
The resources.  
*Required*: No  
*Type*: Array of String  
*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)

`ResourceTypes`  <a name="cfn-ec2-networkinsightsaccessscope-resourcestatementrequest-resourcetypes"></a>
The resource types.  
*Required*: No  
*Type*: Array of String  
*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)

# AWS::EC2::NetworkInsightsAccessScope Tag
<a name="aws-properties-ec2-networkinsightsaccessscope-tag"></a>

Specifies a tag. For more information, see [Resource tags](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-resource-tags.html).

## Syntax
<a name="aws-properties-ec2-networkinsightsaccessscope-tag-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-ec2-networkinsightsaccessscope-tag-syntax.json"></a>

```
{
  "[Key](#cfn-ec2-networkinsightsaccessscope-tag-key)" : String,
  "[Value](#cfn-ec2-networkinsightsaccessscope-tag-value)" : String
}
```

### YAML
<a name="aws-properties-ec2-networkinsightsaccessscope-tag-syntax.yaml"></a>

```
  [Key](#cfn-ec2-networkinsightsaccessscope-tag-key): String
  [Value](#cfn-ec2-networkinsightsaccessscope-tag-value): String
```

## Properties
<a name="aws-properties-ec2-networkinsightsaccessscope-tag-properties"></a>

`Key`  <a name="cfn-ec2-networkinsightsaccessscope-tag-key"></a>
The tag key.  
*Required*: Yes  
*Type*: String  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`Value`  <a name="cfn-ec2-networkinsightsaccessscope-tag-value"></a>
The tag value.  
*Required*: No  
*Type*: String  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

## Examples
<a name="aws-properties-ec2-networkinsightsaccessscope-tag--examples"></a>

### 
<a name="aws-properties-ec2-networkinsightsaccessscope-tag--examples--"></a>

This example specifies two tags for the Network Access Scope.

#### JSON
<a name="aws-properties-ec2-networkinsightsaccessscope-tag--examples----json"></a>

```
"Tags" : [
   {
      "Key" : "key1",
      "Value" : "value1"
   },
   {
      "Key" : "key2",
      "Value" : "value2"
   }
]
```

#### YAML
<a name="aws-properties-ec2-networkinsightsaccessscope-tag--examples----yaml"></a>

```
Tags: 
  - Key: "key1"
    Value: "value1"
  - Key: "key2"
    Value: "value2"
```

# AWS::EC2::NetworkInsightsAccessScope ThroughResourcesStatementRequest
<a name="aws-properties-ec2-networkinsightsaccessscope-throughresourcesstatementrequest"></a>

Describes a through resource statement.

## Syntax
<a name="aws-properties-ec2-networkinsightsaccessscope-throughresourcesstatementrequest-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-ec2-networkinsightsaccessscope-throughresourcesstatementrequest-syntax.json"></a>

```
{
  "[ResourceStatement](#cfn-ec2-networkinsightsaccessscope-throughresourcesstatementrequest-resourcestatement)" : ResourceStatementRequest
}
```

### YAML
<a name="aws-properties-ec2-networkinsightsaccessscope-throughresourcesstatementrequest-syntax.yaml"></a>

```
  [ResourceStatement](#cfn-ec2-networkinsightsaccessscope-throughresourcesstatementrequest-resourcestatement): 
    ResourceStatementRequest
```

## Properties
<a name="aws-properties-ec2-networkinsightsaccessscope-throughresourcesstatementrequest-properties"></a>

`ResourceStatement`  <a name="cfn-ec2-networkinsightsaccessscope-throughresourcesstatementrequest-resourcestatement"></a>
The resource statement.  
*Required*: No  
*Type*: [ResourceStatementRequest](aws-properties-ec2-networkinsightsaccessscope-resourcestatementrequest.md)  
*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)