/AWS1/IF_EC2=>MODIFYVPCENCRYPTIONCONTROL()

About ModifyVpcEncryptionControl

Modifies the encryption control configuration for a VPC. You can update the encryption mode and exclusion settings for various gateway types and peering connections.

For more information, see Enforce VPC encryption in transit in the Amazon VPC User Guide.

Method Signature

METHODS /AWS1/IF_EC2~MODIFYVPCENCRYPTIONCONTROL
  IMPORTING
    !IV_DRYRUN TYPE /AWS1/EC2BOOLEAN OPTIONAL
    !IV_VPCENCRYPTIONCONTROLID TYPE /AWS1/EC2VPCENCCONTROLID OPTIONAL
    !IV_MODE TYPE /AWS1/EC2VPCENCCONTROLMODE OPTIONAL
    !IV_INTERNETGATEWAYEXCLUSION TYPE /AWS1/EC2VPCENCCTLEXCLUSIONS01 OPTIONAL
    !IV_EGRESSONLYINETGWEXCLUSION TYPE /AWS1/EC2VPCENCCTLEXCLUSIONS01 OPTIONAL
    !IV_NATGATEWAYEXCLUSION TYPE /AWS1/EC2VPCENCCTLEXCLUSIONS01 OPTIONAL
    !IV_VIRTPVTGATEWAYEXCLUSION TYPE /AWS1/EC2VPCENCCTLEXCLUSIONS01 OPTIONAL
    !IV_VPCPEERINGEXCLUSION TYPE /AWS1/EC2VPCENCCTLEXCLUSIONS01 OPTIONAL
    !IV_LAMBDAEXCLUSION TYPE /AWS1/EC2VPCENCCTLEXCLUSIONS01 OPTIONAL
    !IV_VPCLATTICEEXCLUSION TYPE /AWS1/EC2VPCENCCTLEXCLUSIONS01 OPTIONAL
    !IV_ELSTCFILESYSTEMEXCLUSION TYPE /AWS1/EC2VPCENCCTLEXCLUSIONS01 OPTIONAL
  RETURNING
    VALUE(OO_OUTPUT) TYPE REF TO /aws1/cl_ec2mdfyvpcencctlrslt
  RAISING
    /AWS1/CX_EC2CLIENTEXC
    /AWS1/CX_EC2SERVEREXC
    /AWS1/CX_RT_TECHNICAL_GENERIC
    /AWS1/CX_RT_SERVICE_GENERIC.

IMPORTING

Required arguments:

iv_vpcencryptioncontrolid TYPE /AWS1/EC2VPCENCCONTROLID /AWS1/EC2VPCENCCONTROLID

The ID of the VPC Encryption Control resource to modify.

Optional arguments:

iv_dryrun TYPE /AWS1/EC2BOOLEAN /AWS1/EC2BOOLEAN

Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.

iv_mode TYPE /AWS1/EC2VPCENCCONTROLMODE /AWS1/EC2VPCENCCONTROLMODE

The encryption mode for the VPC Encryption Control configuration.

iv_internetgatewayexclusion TYPE /AWS1/EC2VPCENCCTLEXCLUSIONS01 /AWS1/EC2VPCENCCTLEXCLUSIONS01

Specifies whether to exclude internet gateway traffic from encryption enforcement.

iv_egressonlyinetgwexclusion TYPE /AWS1/EC2VPCENCCTLEXCLUSIONS01 /AWS1/EC2VPCENCCTLEXCLUSIONS01

Specifies whether to exclude egress-only internet gateway traffic from encryption enforcement.

iv_natgatewayexclusion TYPE /AWS1/EC2VPCENCCTLEXCLUSIONS01 /AWS1/EC2VPCENCCTLEXCLUSIONS01

Specifies whether to exclude NAT gateway traffic from encryption enforcement.

iv_virtpvtgatewayexclusion TYPE /AWS1/EC2VPCENCCTLEXCLUSIONS01 /AWS1/EC2VPCENCCTLEXCLUSIONS01

Specifies whether to exclude virtual private gateway traffic from encryption enforcement.

iv_vpcpeeringexclusion TYPE /AWS1/EC2VPCENCCTLEXCLUSIONS01 /AWS1/EC2VPCENCCTLEXCLUSIONS01

Specifies whether to exclude VPC peering connection traffic from encryption enforcement.

iv_lambdaexclusion TYPE /AWS1/EC2VPCENCCTLEXCLUSIONS01 /AWS1/EC2VPCENCCTLEXCLUSIONS01

Specifies whether to exclude Lambda function traffic from encryption enforcement.

iv_vpclatticeexclusion TYPE /AWS1/EC2VPCENCCTLEXCLUSIONS01 /AWS1/EC2VPCENCCTLEXCLUSIONS01

Specifies whether to exclude VPC Lattice traffic from encryption enforcement.

iv_elstcfilesystemexclusion TYPE /AWS1/EC2VPCENCCTLEXCLUSIONS01 /AWS1/EC2VPCENCCTLEXCLUSIONS01

Specifies whether to exclude Elastic File System traffic from encryption enforcement.

RETURNING

oo_output TYPE REF TO /aws1/cl_ec2mdfyvpcencctlrslt /AWS1/CL_EC2MDFYVPCENCCTLRSLT

Domain	/AWS1/RT_ACCOUNT_ID
Primitive Type	NUMC

Examples

Syntax Example

This is an example of the syntax for calling the method. It includes every possible argument and initializes every possible value. The data provided is not necessarily semantically accurate (for example the value "string" may be provided for something that is intended to be an instance ID, or in some cases two arguments may be mutually exclusive). The syntax shows the ABAP syntax for creating the various data structures.

DATA(lo_result) = lo_client->modifyvpcencryptioncontrol(
  iv_dryrun = ABAP_TRUE
  iv_egressonlyinetgwexclusion = |string|
  iv_elstcfilesystemexclusion = |string|
  iv_internetgatewayexclusion = |string|
  iv_lambdaexclusion = |string|
  iv_mode = |string|
  iv_natgatewayexclusion = |string|
  iv_virtpvtgatewayexclusion = |string|
  iv_vpcencryptioncontrolid = |string|
  iv_vpclatticeexclusion = |string|
  iv_vpcpeeringexclusion = |string|
).

This is an example of reading all possible response values

lo_result = lo_result.
IF lo_result IS NOT INITIAL.
  lo_vpcencryptioncontrol = lo_result->get_vpcencryptioncontrol( ).
  IF lo_vpcencryptioncontrol IS NOT INITIAL.
    lv_vpcid = lo_vpcencryptioncontrol->get_vpcid( ).
    lv_vpcencryptioncontrolid = lo_vpcencryptioncontrol->get_vpcencryptioncontrolid( ).
    lv_vpcencryptioncontrolmod = lo_vpcencryptioncontrol->get_mode( ).
    lv_vpcencryptioncontrolsta = lo_vpcencryptioncontrol->get_state( ).
    lv_string = lo_vpcencryptioncontrol->get_statemessage( ).
    lo_vpcencryptioncontrolexc = lo_vpcencryptioncontrol->get_resourceexclusions( ).
    IF lo_vpcencryptioncontrolexc IS NOT INITIAL.
      lo_vpcencryptioncontrolexc_1 = lo_vpcencryptioncontrolexc->get_internetgateway( ).
      IF lo_vpcencryptioncontrolexc_1 IS NOT INITIAL.
        lv_vpcencryptioncontrolexc_2 = lo_vpcencryptioncontrolexc_1->get_state( ).
        lv_string = lo_vpcencryptioncontrolexc_1->get_statemessage( ).
      ENDIF.
      lo_vpcencryptioncontrolexc_1 = lo_vpcencryptioncontrolexc->get_egressonlyinternetgw( ).
      IF lo_vpcencryptioncontrolexc_1 IS NOT INITIAL.
        lv_vpcencryptioncontrolexc_2 = lo_vpcencryptioncontrolexc_1->get_state( ).
        lv_string = lo_vpcencryptioncontrolexc_1->get_statemessage( ).
      ENDIF.
      lo_vpcencryptioncontrolexc_1 = lo_vpcencryptioncontrolexc->get_natgateway( ).
      IF lo_vpcencryptioncontrolexc_1 IS NOT INITIAL.
        lv_vpcencryptioncontrolexc_2 = lo_vpcencryptioncontrolexc_1->get_state( ).
        lv_string = lo_vpcencryptioncontrolexc_1->get_statemessage( ).
      ENDIF.
      lo_vpcencryptioncontrolexc_1 = lo_vpcencryptioncontrolexc->get_virtualprivategateway( ).
      IF lo_vpcencryptioncontrolexc_1 IS NOT INITIAL.
        lv_vpcencryptioncontrolexc_2 = lo_vpcencryptioncontrolexc_1->get_state( ).
        lv_string = lo_vpcencryptioncontrolexc_1->get_statemessage( ).
      ENDIF.
      lo_vpcencryptioncontrolexc_1 = lo_vpcencryptioncontrolexc->get_vpcpeering( ).
      IF lo_vpcencryptioncontrolexc_1 IS NOT INITIAL.
        lv_vpcencryptioncontrolexc_2 = lo_vpcencryptioncontrolexc_1->get_state( ).
        lv_string = lo_vpcencryptioncontrolexc_1->get_statemessage( ).
      ENDIF.
      lo_vpcencryptioncontrolexc_1 = lo_vpcencryptioncontrolexc->get_lambda( ).
      IF lo_vpcencryptioncontrolexc_1 IS NOT INITIAL.
        lv_vpcencryptioncontrolexc_2 = lo_vpcencryptioncontrolexc_1->get_state( ).
        lv_string = lo_vpcencryptioncontrolexc_1->get_statemessage( ).
      ENDIF.
      lo_vpcencryptioncontrolexc_1 = lo_vpcencryptioncontrolexc->get_vpclattice( ).
      IF lo_vpcencryptioncontrolexc_1 IS NOT INITIAL.
        lv_vpcencryptioncontrolexc_2 = lo_vpcencryptioncontrolexc_1->get_state( ).
        lv_string = lo_vpcencryptioncontrolexc_1->get_statemessage( ).
      ENDIF.
      lo_vpcencryptioncontrolexc_1 = lo_vpcencryptioncontrolexc->get_elasticfilesystem( ).
      IF lo_vpcencryptioncontrolexc_1 IS NOT INITIAL.
        lv_vpcencryptioncontrolexc_2 = lo_vpcencryptioncontrolexc_1->get_state( ).
        lv_string = lo_vpcencryptioncontrolexc_1->get_statemessage( ).
      ENDIF.
    ENDIF.
    LOOP AT lo_vpcencryptioncontrol->get_tags( ) into lo_row.
      lo_row_1 = lo_row.
      IF lo_row_1 IS NOT INITIAL.
        lv_string = lo_row_1->get_key( ).
        lv_string = lo_row_1->get_value( ).
      ENDIF.
    ENDLOOP.
  ENDIF.
ENDIF.