This is the new *CloudFormation Template Reference Guide*. Please update your bookmarks and links. For help getting started with CloudFormation, see the [AWS CloudFormation User Guide](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/Welcome.html).

# AWS::NetworkManager::VpcAttachment
<a name="aws-resource-networkmanager-vpcattachment"></a>

Creates a VPC attachment on an edge location of a core network.

## Syntax
<a name="aws-resource-networkmanager-vpcattachment-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-resource-networkmanager-vpcattachment-syntax.json"></a>

```
{
  "Type" : "AWS::NetworkManager::VpcAttachment",
  "Properties" : {
      "[CoreNetworkId](#cfn-networkmanager-vpcattachment-corenetworkid)" : String,
      "[Options](#cfn-networkmanager-vpcattachment-options)" : VpcOptions,
      "[ProposedNetworkFunctionGroupChange](#cfn-networkmanager-vpcattachment-proposednetworkfunctiongroupchange)" : ProposedNetworkFunctionGroupChange,
      "[ProposedSegmentChange](#cfn-networkmanager-vpcattachment-proposedsegmentchange)" : ProposedSegmentChange,
      "[RoutingPolicyLabel](#cfn-networkmanager-vpcattachment-routingpolicylabel)" : String,
      "[SubnetArns](#cfn-networkmanager-vpcattachment-subnetarns)" : [ String, ... ],
      "[Tags](#cfn-networkmanager-vpcattachment-tags)" : [ Tag, ... ],
      "[VpcArn](#cfn-networkmanager-vpcattachment-vpcarn)" : String
    }
}
```

### YAML
<a name="aws-resource-networkmanager-vpcattachment-syntax.yaml"></a>

```
Type: AWS::NetworkManager::VpcAttachment
Properties:
  [CoreNetworkId](#cfn-networkmanager-vpcattachment-corenetworkid): String
  [Options](#cfn-networkmanager-vpcattachment-options): 
    VpcOptions
  [ProposedNetworkFunctionGroupChange](#cfn-networkmanager-vpcattachment-proposednetworkfunctiongroupchange): 
    ProposedNetworkFunctionGroupChange
  [ProposedSegmentChange](#cfn-networkmanager-vpcattachment-proposedsegmentchange): 
    ProposedSegmentChange
  [RoutingPolicyLabel](#cfn-networkmanager-vpcattachment-routingpolicylabel): String
  [SubnetArns](#cfn-networkmanager-vpcattachment-subnetarns): 
    - String
  [Tags](#cfn-networkmanager-vpcattachment-tags): 
    - Tag
  [VpcArn](#cfn-networkmanager-vpcattachment-vpcarn): String
```

## Properties
<a name="aws-resource-networkmanager-vpcattachment-properties"></a>

`CoreNetworkId`  <a name="cfn-networkmanager-vpcattachment-corenetworkid"></a>
The core network ID.  
*Required*: Yes  
*Type*: String  
*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)

`Options`  <a name="cfn-networkmanager-vpcattachment-options"></a>
Options for creating the VPC attachment.  
*Required*: No  
*Type*: [VpcOptions](aws-properties-networkmanager-vpcattachment-vpcoptions.md)  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`ProposedNetworkFunctionGroupChange`  <a name="cfn-networkmanager-vpcattachment-proposednetworkfunctiongroupchange"></a>
Describes proposed changes to a network function group.   
*Required*: No  
*Type*: [ProposedNetworkFunctionGroupChange](aws-properties-networkmanager-vpcattachment-proposednetworkfunctiongroupchange.md)  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`ProposedSegmentChange`  <a name="cfn-networkmanager-vpcattachment-proposedsegmentchange"></a>
Describes a proposed segment change. In some cases, the segment change must first be evaluated and accepted.   
*Required*: No  
*Type*: [ProposedSegmentChange](aws-properties-networkmanager-vpcattachment-proposedsegmentchange.md)  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`RoutingPolicyLabel`  <a name="cfn-networkmanager-vpcattachment-routingpolicylabel"></a>
Property description not available.  
*Required*: No  
*Type*: String  
*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)

`SubnetArns`  <a name="cfn-networkmanager-vpcattachment-subnetarns"></a>
The subnet ARNs.  
*Required*: Yes  
*Type*: Array of String  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`Tags`  <a name="cfn-networkmanager-vpcattachment-tags"></a>
The tags associated with the VPC attachment.  
*Required*: No  
*Type*: Array of [Tag](aws-properties-networkmanager-vpcattachment-tag.md)  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`VpcArn`  <a name="cfn-networkmanager-vpcattachment-vpcarn"></a>
The ARN of the VPC attachment.  
*Required*: Yes  
*Type*: String  
*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)

## Return values
<a name="aws-resource-networkmanager-vpcattachment-return-values"></a>

### Ref
<a name="aws-resource-networkmanager-vpcattachment-return-values-ref"></a>

When you pass the logical ID of this resource to the intrinsic `Ref` function, `Ref` returns the `AttachmentId`. For example, `{ "Ref: "attachment-00067e74104d33769" }`.

For more information about using the `Ref` function, see [https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-ref.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-ref.html).

### Fn::GetAtt
<a name="aws-resource-networkmanager-vpcattachment-return-values-fn--getatt"></a>

The `Fn::GetAtt` intrinsic function returns a value for a specified attribute of this type. The following are the available attributes and sample return values.

For more information about using the `Fn::GetAtt` intrinsic function, see [https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-getatt.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-getatt.html).

#### 
<a name="aws-resource-networkmanager-vpcattachment-return-values-fn--getatt-fn--getatt"></a>

`AttachmentId`  <a name="AttachmentId-fn::getatt"></a>
The ID of the VPC attachment.

`AttachmentPolicyRuleNumber`  <a name="AttachmentPolicyRuleNumber-fn::getatt"></a>
The policy rule number associated with the attachment.

`AttachmentType`  <a name="AttachmentType-fn::getatt"></a>
The type of attachment. This will be `VPC`.

`CoreNetworkArn`  <a name="CoreNetworkArn-fn::getatt"></a>
The ARN of the core network. 

`CreatedAt`  <a name="CreatedAt-fn::getatt"></a>
The timestamp when the VPC attachment was created. 

`EdgeLocation`  <a name="EdgeLocation-fn::getatt"></a>
The Region where the core network edge is located.

`LastModificationErrors`  <a name="LastModificationErrors-fn::getatt"></a>
Property description not available.

`NetworkFunctionGroupName`  <a name="NetworkFunctionGroupName-fn::getatt"></a>
The name of the network function group.

`OwnerAccountId`  <a name="OwnerAccountId-fn::getatt"></a>
The ID of the VPC attachment owner.

`ResourceArn`  <a name="ResourceArn-fn::getatt"></a>
The resource ARN for the VPC attachment.

`SegmentName`  <a name="SegmentName-fn::getatt"></a>
The name of the attachment's segment.

`State`  <a name="State-fn::getatt"></a>
The state of the attachment. This can be: `REJECTED` \$1 `PENDING_ATTACHMENT_ACCEPTANCE` \$1 `CREATING` \$1 `FAILED` \$1 `AVAILABLE` \$1 `UPDATING` \$1 ` PENDING_NETWORK_UPDATE` \$1 `PENDING_TAG_ACCEPTANCE` \$1 `DELETING`. 

`UpdatedAt`  <a name="UpdatedAt-fn::getatt"></a>
The timestamp when the VPC attachment was last updated.

# AWS::NetworkManager::VpcAttachment ProposedNetworkFunctionGroupChange
<a name="aws-properties-networkmanager-vpcattachment-proposednetworkfunctiongroupchange"></a>

Describes proposed changes to a network function group. 

## Syntax
<a name="aws-properties-networkmanager-vpcattachment-proposednetworkfunctiongroupchange-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-networkmanager-vpcattachment-proposednetworkfunctiongroupchange-syntax.json"></a>

```
{
  "[AttachmentPolicyRuleNumber](#cfn-networkmanager-vpcattachment-proposednetworkfunctiongroupchange-attachmentpolicyrulenumber)" : Integer,
  "[NetworkFunctionGroupName](#cfn-networkmanager-vpcattachment-proposednetworkfunctiongroupchange-networkfunctiongroupname)" : String,
  "[Tags](#cfn-networkmanager-vpcattachment-proposednetworkfunctiongroupchange-tags)" : [ Tag, ... ]
}
```

### YAML
<a name="aws-properties-networkmanager-vpcattachment-proposednetworkfunctiongroupchange-syntax.yaml"></a>

```
  [AttachmentPolicyRuleNumber](#cfn-networkmanager-vpcattachment-proposednetworkfunctiongroupchange-attachmentpolicyrulenumber): Integer
  [NetworkFunctionGroupName](#cfn-networkmanager-vpcattachment-proposednetworkfunctiongroupchange-networkfunctiongroupname): String
  [Tags](#cfn-networkmanager-vpcattachment-proposednetworkfunctiongroupchange-tags): 
    - Tag
```

## Properties
<a name="aws-properties-networkmanager-vpcattachment-proposednetworkfunctiongroupchange-properties"></a>

`AttachmentPolicyRuleNumber`  <a name="cfn-networkmanager-vpcattachment-proposednetworkfunctiongroupchange-attachmentpolicyrulenumber"></a>
The proposed new attachment policy rule number for the network function group.  
*Required*: No  
*Type*: Integer  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`NetworkFunctionGroupName`  <a name="cfn-networkmanager-vpcattachment-proposednetworkfunctiongroupchange-networkfunctiongroupname"></a>
The proposed name change for the network function group name.  
*Required*: No  
*Type*: String  
*Pattern*: `[\s\S]*`  
*Minimum*: `0`  
*Maximum*: `256`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`Tags`  <a name="cfn-networkmanager-vpcattachment-proposednetworkfunctiongroupchange-tags"></a>
The list of proposed changes to the key-value tags associated with the network function group.  
*Required*: No  
*Type*: Array of [Tag](aws-properties-networkmanager-vpcattachment-tag.md)  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

# AWS::NetworkManager::VpcAttachment ProposedSegmentChange
<a name="aws-properties-networkmanager-vpcattachment-proposedsegmentchange"></a>

Describes a proposed segment change. In some cases, the segment change must first be evaluated and accepted. 

## Syntax
<a name="aws-properties-networkmanager-vpcattachment-proposedsegmentchange-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-networkmanager-vpcattachment-proposedsegmentchange-syntax.json"></a>

```
{
  "[AttachmentPolicyRuleNumber](#cfn-networkmanager-vpcattachment-proposedsegmentchange-attachmentpolicyrulenumber)" : Integer,
  "[SegmentName](#cfn-networkmanager-vpcattachment-proposedsegmentchange-segmentname)" : String,
  "[Tags](#cfn-networkmanager-vpcattachment-proposedsegmentchange-tags)" : [ Tag, ... ]
}
```

### YAML
<a name="aws-properties-networkmanager-vpcattachment-proposedsegmentchange-syntax.yaml"></a>

```
  [AttachmentPolicyRuleNumber](#cfn-networkmanager-vpcattachment-proposedsegmentchange-attachmentpolicyrulenumber): Integer
  [SegmentName](#cfn-networkmanager-vpcattachment-proposedsegmentchange-segmentname): String
  [Tags](#cfn-networkmanager-vpcattachment-proposedsegmentchange-tags): 
    - Tag
```

## Properties
<a name="aws-properties-networkmanager-vpcattachment-proposedsegmentchange-properties"></a>

`AttachmentPolicyRuleNumber`  <a name="cfn-networkmanager-vpcattachment-proposedsegmentchange-attachmentpolicyrulenumber"></a>
The rule number in the policy document that applies to this change.  
*Required*: No  
*Type*: Integer  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`SegmentName`  <a name="cfn-networkmanager-vpcattachment-proposedsegmentchange-segmentname"></a>
The name of the segment to change.  
*Required*: No  
*Type*: String  
*Pattern*: `[\s\S]*`  
*Minimum*: `0`  
*Maximum*: `256`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`Tags`  <a name="cfn-networkmanager-vpcattachment-proposedsegmentchange-tags"></a>
The list of key-value tags that changed for the segment.  
*Required*: No  
*Type*: Array of [Tag](aws-properties-networkmanager-vpcattachment-tag.md)  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

# AWS::NetworkManager::VpcAttachment Tag
<a name="aws-properties-networkmanager-vpcattachment-tag"></a>

Describes a tag.

## Syntax
<a name="aws-properties-networkmanager-vpcattachment-tag-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-networkmanager-vpcattachment-tag-syntax.json"></a>

```
{
  "[Key](#cfn-networkmanager-vpcattachment-tag-key)" : String,
  "[Value](#cfn-networkmanager-vpcattachment-tag-value)" : String
}
```

### YAML
<a name="aws-properties-networkmanager-vpcattachment-tag-syntax.yaml"></a>

```
  [Key](#cfn-networkmanager-vpcattachment-tag-key): String
  [Value](#cfn-networkmanager-vpcattachment-tag-value): String
```

## Properties
<a name="aws-properties-networkmanager-vpcattachment-tag-properties"></a>

`Key`  <a name="cfn-networkmanager-vpcattachment-tag-key"></a>
The tag key.  
Constraints: Maximum length of 128 characters.  
*Required*: Yes  
*Type*: String  
*Pattern*: `[\s\S]*`  
*Minimum*: `0`  
*Maximum*: `10000000`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`Value`  <a name="cfn-networkmanager-vpcattachment-tag-value"></a>
The tag value.  
Constraints: Maximum length of 256 characters.  
*Required*: Yes  
*Type*: String  
*Pattern*: `[\s\S]*`  
*Minimum*: `0`  
*Maximum*: `10000000`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

# AWS::NetworkManager::VpcAttachment VpcOptions
<a name="aws-properties-networkmanager-vpcattachment-vpcoptions"></a>

Describes the VPC options.

## Syntax
<a name="aws-properties-networkmanager-vpcattachment-vpcoptions-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-networkmanager-vpcattachment-vpcoptions-syntax.json"></a>

```
{
  "[ApplianceModeSupport](#cfn-networkmanager-vpcattachment-vpcoptions-appliancemodesupport)" : Boolean,
  "[DnsSupport](#cfn-networkmanager-vpcattachment-vpcoptions-dnssupport)" : Boolean,
  "[Ipv6Support](#cfn-networkmanager-vpcattachment-vpcoptions-ipv6support)" : Boolean,
  "[SecurityGroupReferencingSupport](#cfn-networkmanager-vpcattachment-vpcoptions-securitygroupreferencingsupport)" : Boolean
}
```

### YAML
<a name="aws-properties-networkmanager-vpcattachment-vpcoptions-syntax.yaml"></a>

```
  [ApplianceModeSupport](#cfn-networkmanager-vpcattachment-vpcoptions-appliancemodesupport): Boolean
  [DnsSupport](#cfn-networkmanager-vpcattachment-vpcoptions-dnssupport): Boolean
  [Ipv6Support](#cfn-networkmanager-vpcattachment-vpcoptions-ipv6support): Boolean
  [SecurityGroupReferencingSupport](#cfn-networkmanager-vpcattachment-vpcoptions-securitygroupreferencingsupport): Boolean
```

## Properties
<a name="aws-properties-networkmanager-vpcattachment-vpcoptions-properties"></a>

`ApplianceModeSupport`  <a name="cfn-networkmanager-vpcattachment-vpcoptions-appliancemodesupport"></a>
Indicates whether appliance mode is supported. If enabled, traffic flow between a source and destination use the same Availability Zone for the VPC attachment for the lifetime of that flow. The default value is `false`.  
*Required*: No  
*Type*: Boolean  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`DnsSupport`  <a name="cfn-networkmanager-vpcattachment-vpcoptions-dnssupport"></a>
Indicates whether DNS is supported.  
*Required*: No  
*Type*: Boolean  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`Ipv6Support`  <a name="cfn-networkmanager-vpcattachment-vpcoptions-ipv6support"></a>
Indicates whether IPv6 is supported.  
*Required*: No  
*Type*: Boolean  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

`SecurityGroupReferencingSupport`  <a name="cfn-networkmanager-vpcattachment-vpcoptions-securitygroupreferencingsupport"></a>
Indicates whether security group referencing is enabled for this VPC attachment. The default is `true`. However, at the core network policy-level the default is set to `false`.  
*Required*: No  
*Type*: Boolean  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)