Skip to content

/AWS1/CL_EC2VPCENCCONTROLCONF

Describes the configuration settings for VPC Encryption Control.

For more information, see Enforce VPC encryption in transit in the Amazon VPC User Guide.

CONSTRUCTOR

IMPORTING

Required arguments:

iv_mode TYPE /AWS1/EC2VPCENCCONTROLMODE /AWS1/EC2VPCENCCONTROLMODE

The encryption mode for the VPC Encryption Control configuration.

Optional arguments:

iv_internetgatewayexclusion TYPE /AWS1/EC2VPCENCCTLEXCLUSIONS01 /AWS1/EC2VPCENCCTLEXCLUSIONS01

Specifies whether to exclude internet gateway traffic from encryption enforcement.

iv_egressonlyinetgwexclusion TYPE /AWS1/EC2VPCENCCTLEXCLUSIONS01 /AWS1/EC2VPCENCCTLEXCLUSIONS01

Specifies whether to exclude egress-only internet gateway traffic from encryption enforcement.

iv_natgatewayexclusion TYPE /AWS1/EC2VPCENCCTLEXCLUSIONS01 /AWS1/EC2VPCENCCTLEXCLUSIONS01

Specifies whether to exclude NAT gateway traffic from encryption enforcement.

iv_virtpvtgatewayexclusion TYPE /AWS1/EC2VPCENCCTLEXCLUSIONS01 /AWS1/EC2VPCENCCTLEXCLUSIONS01

Specifies whether to exclude virtual private gateway traffic from encryption enforcement.

iv_vpcpeeringexclusion TYPE /AWS1/EC2VPCENCCTLEXCLUSIONS01 /AWS1/EC2VPCENCCTLEXCLUSIONS01

Specifies whether to exclude VPC peering connection traffic from encryption enforcement.

iv_lambdaexclusion TYPE /AWS1/EC2VPCENCCTLEXCLUSIONS01 /AWS1/EC2VPCENCCTLEXCLUSIONS01

Specifies whether to exclude Lambda function traffic from encryption enforcement.

iv_vpclatticeexclusion TYPE /AWS1/EC2VPCENCCTLEXCLUSIONS01 /AWS1/EC2VPCENCCTLEXCLUSIONS01

Specifies whether to exclude VPC Lattice traffic from encryption enforcement.

iv_elstcfilesystemexclusion TYPE /AWS1/EC2VPCENCCTLEXCLUSIONS01 /AWS1/EC2VPCENCCTLEXCLUSIONS01

Specifies whether to exclude Elastic File System traffic from encryption enforcement.


Queryable Attributes

Mode

The encryption mode for the VPC Encryption Control configuration.

Accessible with the following methods

Method Description
GET_MODE() Getter for MODE, with configurable default
ASK_MODE() Getter for MODE w/ exceptions if field has no value
HAS_MODE() Determine if MODE has a value

InternetGatewayExclusion

Specifies whether to exclude internet gateway traffic from encryption enforcement.

Accessible with the following methods

Method Description
GET_INTERNETGATEWAYEXCLUSION() Getter for INTERNETGATEWAYEXCLUSION, with configurable defau
ASK_INTERNETGATEWAYEXCLUSION() Getter for INTERNETGATEWAYEXCLUSION w/ exceptions if field h
HAS_INTERNETGATEWAYEXCLUSION() Determine if INTERNETGATEWAYEXCLUSION has a value

EgressOnlyInternetGatewayExclusion

Specifies whether to exclude egress-only internet gateway traffic from encryption enforcement.

Accessible with the following methods

Method Description
GET_EGRONLYINETGWEXCLUSION() Getter for EGRESSONLYINETGWEXCLUSION, with configurable defa
ASK_EGRONLYINETGWEXCLUSION() Getter for EGRESSONLYINETGWEXCLUSION w/ exceptions if field
HAS_EGRONLYINETGWEXCLUSION() Determine if EGRESSONLYINETGWEXCLUSION has a value

NatGatewayExclusion

Specifies whether to exclude NAT gateway traffic from encryption enforcement.

Accessible with the following methods

Method Description
GET_NATGATEWAYEXCLUSION() Getter for NATGATEWAYEXCLUSION, with configurable default
ASK_NATGATEWAYEXCLUSION() Getter for NATGATEWAYEXCLUSION w/ exceptions if field has no
HAS_NATGATEWAYEXCLUSION() Determine if NATGATEWAYEXCLUSION has a value

VirtualPrivateGatewayExclusion

Specifies whether to exclude virtual private gateway traffic from encryption enforcement.

Accessible with the following methods

Method Description
GET_VIRTPVTGATEWAYEXCLUSION() Getter for VIRTUALPVTGATEWAYEXCLUSION, with configurable def
ASK_VIRTPVTGATEWAYEXCLUSION() Getter for VIRTUALPVTGATEWAYEXCLUSION w/ exceptions if field
HAS_VIRTPVTGATEWAYEXCLUSION() Determine if VIRTUALPVTGATEWAYEXCLUSION has a value

VpcPeeringExclusion

Specifies whether to exclude VPC peering connection traffic from encryption enforcement.

Accessible with the following methods

Method Description
GET_VPCPEERINGEXCLUSION() Getter for VPCPEERINGEXCLUSION, with configurable default
ASK_VPCPEERINGEXCLUSION() Getter for VPCPEERINGEXCLUSION w/ exceptions if field has no
HAS_VPCPEERINGEXCLUSION() Determine if VPCPEERINGEXCLUSION has a value

LambdaExclusion

Specifies whether to exclude Lambda function traffic from encryption enforcement.

Accessible with the following methods

Method Description
GET_LAMBDAEXCLUSION() Getter for LAMBDAEXCLUSION, with configurable default
ASK_LAMBDAEXCLUSION() Getter for LAMBDAEXCLUSION w/ exceptions if field has no val
HAS_LAMBDAEXCLUSION() Determine if LAMBDAEXCLUSION has a value

VpcLatticeExclusion

Specifies whether to exclude VPC Lattice traffic from encryption enforcement.

Accessible with the following methods

Method Description
GET_VPCLATTICEEXCLUSION() Getter for VPCLATTICEEXCLUSION, with configurable default
ASK_VPCLATTICEEXCLUSION() Getter for VPCLATTICEEXCLUSION w/ exceptions if field has no
HAS_VPCLATTICEEXCLUSION() Determine if VPCLATTICEEXCLUSION has a value

ElasticFileSystemExclusion

Specifies whether to exclude Elastic File System traffic from encryption enforcement.

Accessible with the following methods

Method Description
GET_ELSTCFILESYSTEMEXCLUSION() Getter for ELASTICFILESYSTEMEXCLUSION, with configurable def
ASK_ELSTCFILESYSTEMEXCLUSION() Getter for ELASTICFILESYSTEMEXCLUSION w/ exceptions if field
HAS_ELSTCFILESYSTEMEXCLUSION() Determine if ELASTICFILESYSTEMEXCLUSION has a value