Sign in Dashboard Get started
  1. Registry
  2. Packages
  3. AWS Cloud Control
  4. API Docs
  5. ec2
  6. Vpc

We recommend new projects start with resources from the AWS provider.

Viewing docs for AWS Cloud Control v1.76.0
published on Monday, Aug 24, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-aws-native

aws-native.ec2.Vpc

aws-native logo aws-native logo

We recommend new projects start with resources from the AWS provider.

Viewing docs for AWS Cloud Control v1.76.0
published on Monday, Aug 24, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-aws-native

    Specifies a virtual private cloud (VPC). A VPC must have an associated IPv4 CIDR block. You can specify an IPv4 CIDR block or an IPAM-allocated IPv4 CIDR block. To associate an IPv6 CIDR block with the VPC, see AWS::EC2::VPCCidrBlock. For more information, see Virtual private clouds (VPC) in the Amazon VPC User Guide.

    Create Vpc Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new Vpc(name: string, args?: VpcArgs, opts?: CustomResourceOptions);
    @overload
def Vpc(resource_name: str,
        args: Optional[VpcArgs] = None,
        opts: Optional[ResourceOptions] = None)

@overload
def Vpc(resource_name: str,
        opts: Optional[ResourceOptions] = None,
        cidr_block: Optional[str] = None,
        enable_dns_hostnames: Optional[bool] = None,
        enable_dns_support: Optional[bool] = None,
        instance_tenancy: Optional[str] = None,
        ipv4_ipam_pool_id: Optional[str] = None,
        ipv4_netmask_length: Optional[int] = None,
        tags: Optional[Sequence[_root_inputs.TagArgs]] = None,
        vpc_encryption_control: Optional[VpcEncryptionControlArgs] = None)
    func NewVpc(ctx *Context, name string, args *VpcArgs, opts ...ResourceOption) (*Vpc, error)
    public Vpc(string name, VpcArgs? args = null, CustomResourceOptions? opts = null)
    public Vpc(String name, VpcArgs args)
public Vpc(String name, VpcArgs args, CustomResourceOptions options)

    type: aws-native:ec2:Vpc
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "aws-native_ec2_vpc" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args VpcArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args VpcArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args VpcArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args VpcArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args VpcArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Vpc Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The Vpc resource accepts the following input properties:

    CidrBlock string
    The IPv4 network range for the VPC, in CIDR notation. For example, 10.0.0.0/16. We modify the specified CIDR block to its canonical form; for example, if you specify 100.68.0.18/18, we modify it to 100.68.0.0/18. You must specify eitherCidrBlock or Ipv4IpamPoolId.
    EnableDnsHostnames bool
    Indicates whether the instances launched in the VPC get DNS hostnames. If enabled, instances in the VPC get DNS hostnames; otherwise, they do not. Disabled by default for nondefault VPCs. For more information, see DNS attributes in your VPC. You can only enable DNS hostnames if you've enabled DNS support.
    EnableDnsSupport bool
    Indicates whether the DNS resolution is supported for the VPC. If enabled, queries to the Amazon provided DNS server at the 169.254.169.253 IP address, or the reserved IP address at the base of the VPC network range "plus two" succeed. If disabled, the Amazon provided DNS service in the VPC that resolves public DNS hostnames to IP addresses is not enabled. Enabled by default. For more information, see DNS attributes in your VPC.
    InstanceTenancy string

    The allowed tenancy of instances launched into the VPC.

    • default: An instance launched into the VPC runs on shared hardware by default, unless you explicitly specify a different tenancy during instance launch.
    • dedicated: An instance launched into the VPC runs on dedicated hardware by default, unless you explicitly specify a tenancy of host during instance launch. You cannot specify a tenancy of default during instance launch.

    Updating InstanceTenancy requires no replacement only if you are updating its value from dedicated to default. Updating InstanceTenancy from default to dedicated requires replacement.

    Ipv4IpamPoolId string
    The ID of an IPv4 IPAM pool you want to use for allocating this VPC's CIDR. For more information, see What is IPAM? in the Amazon VPC IPAM User Guide. You must specify eitherCidrBlock or Ipv4IpamPoolId.
    Ipv4NetmaskLength int
    The netmask length of the IPv4 CIDR you want to allocate to this VPC from an Amazon VPC IP Address Manager (IPAM) pool. For more information about IPAM, see What is IPAM? in the Amazon VPC IPAM User Guide.
    Tags List<Pulumi.AwsNative.Inputs.Tag>
    The tags for the VPC.
    VpcEncryptionControl Pulumi.AwsNative.Ec2.Inputs.VpcEncryptionControl
    Describes the configuration and state of VPC encryption controls. For more information, see Enforce VPC encryption in transit in the Amazon VPC User Guide.
    CidrBlock string
    The IPv4 network range for the VPC, in CIDR notation. For example, 10.0.0.0/16. We modify the specified CIDR block to its canonical form; for example, if you specify 100.68.0.18/18, we modify it to 100.68.0.0/18. You must specify eitherCidrBlock or Ipv4IpamPoolId.
    EnableDnsHostnames bool
    Indicates whether the instances launched in the VPC get DNS hostnames. If enabled, instances in the VPC get DNS hostnames; otherwise, they do not. Disabled by default for nondefault VPCs. For more information, see DNS attributes in your VPC. You can only enable DNS hostnames if you've enabled DNS support.
    EnableDnsSupport bool
    Indicates whether the DNS resolution is supported for the VPC. If enabled, queries to the Amazon provided DNS server at the 169.254.169.253 IP address, or the reserved IP address at the base of the VPC network range "plus two" succeed. If disabled, the Amazon provided DNS service in the VPC that resolves public DNS hostnames to IP addresses is not enabled. Enabled by default. For more information, see DNS attributes in your VPC.
    InstanceTenancy string

    The allowed tenancy of instances launched into the VPC.

    • default: An instance launched into the VPC runs on shared hardware by default, unless you explicitly specify a different tenancy during instance launch.
    • dedicated: An instance launched into the VPC runs on dedicated hardware by default, unless you explicitly specify a tenancy of host during instance launch. You cannot specify a tenancy of default during instance launch.

    Updating InstanceTenancy requires no replacement only if you are updating its value from dedicated to default. Updating InstanceTenancy from default to dedicated requires replacement.

    Ipv4IpamPoolId string
    The ID of an IPv4 IPAM pool you want to use for allocating this VPC's CIDR. For more information, see What is IPAM? in the Amazon VPC IPAM User Guide. You must specify eitherCidrBlock or Ipv4IpamPoolId.
    Ipv4NetmaskLength int
    The netmask length of the IPv4 CIDR you want to allocate to this VPC from an Amazon VPC IP Address Manager (IPAM) pool. For more information about IPAM, see What is IPAM? in the Amazon VPC IPAM User Guide.
    Tags TagArgs
    The tags for the VPC.
    VpcEncryptionControl VpcEncryptionControlTypeArgs
    Describes the configuration and state of VPC encryption controls. For more information, see Enforce VPC encryption in transit in the Amazon VPC User Guide.
    cidr_block string
    The IPv4 network range for the VPC, in CIDR notation. For example, 10.0.0.0/16. We modify the specified CIDR block to its canonical form; for example, if you specify 100.68.0.18/18, we modify it to 100.68.0.0/18. You must specify eitherCidrBlock or Ipv4IpamPoolId.
    enable_dns_hostnames bool
    Indicates whether the instances launched in the VPC get DNS hostnames. If enabled, instances in the VPC get DNS hostnames; otherwise, they do not. Disabled by default for nondefault VPCs. For more information, see DNS attributes in your VPC. You can only enable DNS hostnames if you've enabled DNS support.
    enable_dns_support bool
    Indicates whether the DNS resolution is supported for the VPC. If enabled, queries to the Amazon provided DNS server at the 169.254.169.253 IP address, or the reserved IP address at the base of the VPC network range "plus two" succeed. If disabled, the Amazon provided DNS service in the VPC that resolves public DNS hostnames to IP addresses is not enabled. Enabled by default. For more information, see DNS attributes in your VPC.
    instance_tenancy string

    The allowed tenancy of instances launched into the VPC.

    • default: An instance launched into the VPC runs on shared hardware by default, unless you explicitly specify a different tenancy during instance launch.
    • dedicated: An instance launched into the VPC runs on dedicated hardware by default, unless you explicitly specify a tenancy of host during instance launch. You cannot specify a tenancy of default during instance launch.

    Updating InstanceTenancy requires no replacement only if you are updating its value from dedicated to default. Updating InstanceTenancy from default to dedicated requires replacement.

    ipv4_ipam_pool_id string
    The ID of an IPv4 IPAM pool you want to use for allocating this VPC's CIDR. For more information, see What is IPAM? in the Amazon VPC IPAM User Guide. You must specify eitherCidrBlock or Ipv4IpamPoolId.
    ipv4_netmask_length number
    The netmask length of the IPv4 CIDR you want to allocate to this VPC from an Amazon VPC IP Address Manager (IPAM) pool. For more information about IPAM, see What is IPAM? in the Amazon VPC IPAM User Guide.
    tags list(object)
    The tags for the VPC.
    vpc_encryption_control object
    Describes the configuration and state of VPC encryption controls. For more information, see Enforce VPC encryption in transit in the Amazon VPC User Guide.
    cidrBlock String
    The IPv4 network range for the VPC, in CIDR notation. For example, 10.0.0.0/16. We modify the specified CIDR block to its canonical form; for example, if you specify 100.68.0.18/18, we modify it to 100.68.0.0/18. You must specify eitherCidrBlock or Ipv4IpamPoolId.
    enableDnsHostnames Boolean
    Indicates whether the instances launched in the VPC get DNS hostnames. If enabled, instances in the VPC get DNS hostnames; otherwise, they do not. Disabled by default for nondefault VPCs. For more information, see DNS attributes in your VPC. You can only enable DNS hostnames if you've enabled DNS support.
    enableDnsSupport Boolean
    Indicates whether the DNS resolution is supported for the VPC. If enabled, queries to the Amazon provided DNS server at the 169.254.169.253 IP address, or the reserved IP address at the base of the VPC network range "plus two" succeed. If disabled, the Amazon provided DNS service in the VPC that resolves public DNS hostnames to IP addresses is not enabled. Enabled by default. For more information, see DNS attributes in your VPC.
    instanceTenancy String

    The allowed tenancy of instances launched into the VPC.

    • default: An instance launched into the VPC runs on shared hardware by default, unless you explicitly specify a different tenancy during instance launch.
    • dedicated: An instance launched into the VPC runs on dedicated hardware by default, unless you explicitly specify a tenancy of host during instance launch. You cannot specify a tenancy of default during instance launch.

    Updating InstanceTenancy requires no replacement only if you are updating its value from dedicated to default. Updating InstanceTenancy from default to dedicated requires replacement.

    ipv4IpamPoolId String
    The ID of an IPv4 IPAM pool you want to use for allocating this VPC's CIDR. For more information, see What is IPAM? in the Amazon VPC IPAM User Guide. You must specify eitherCidrBlock or Ipv4IpamPoolId.
    ipv4NetmaskLength Integer
    The netmask length of the IPv4 CIDR you want to allocate to this VPC from an Amazon VPC IP Address Manager (IPAM) pool. For more information about IPAM, see What is IPAM? in the Amazon VPC IPAM User Guide.
    tags List<Tag>
    The tags for the VPC.
    vpcEncryptionControl VpcEncryptionControl
    Describes the configuration and state of VPC encryption controls. For more information, see Enforce VPC encryption in transit in the Amazon VPC User Guide.
    cidrBlock string
    The IPv4 network range for the VPC, in CIDR notation. For example, 10.0.0.0/16. We modify the specified CIDR block to its canonical form; for example, if you specify 100.68.0.18/18, we modify it to 100.68.0.0/18. You must specify eitherCidrBlock or Ipv4IpamPoolId.
    enableDnsHostnames boolean
    Indicates whether the instances launched in the VPC get DNS hostnames. If enabled, instances in the VPC get DNS hostnames; otherwise, they do not. Disabled by default for nondefault VPCs. For more information, see DNS attributes in your VPC. You can only enable DNS hostnames if you've enabled DNS support.
    enableDnsSupport boolean
    Indicates whether the DNS resolution is supported for the VPC. If enabled, queries to the Amazon provided DNS server at the 169.254.169.253 IP address, or the reserved IP address at the base of the VPC network range "plus two" succeed. If disabled, the Amazon provided DNS service in the VPC that resolves public DNS hostnames to IP addresses is not enabled. Enabled by default. For more information, see DNS attributes in your VPC.
    instanceTenancy string

    The allowed tenancy of instances launched into the VPC.

    • default: An instance launched into the VPC runs on shared hardware by default, unless you explicitly specify a different tenancy during instance launch.
    • dedicated: An instance launched into the VPC runs on dedicated hardware by default, unless you explicitly specify a tenancy of host during instance launch. You cannot specify a tenancy of default during instance launch.

    Updating InstanceTenancy requires no replacement only if you are updating its value from dedicated to default. Updating InstanceTenancy from default to dedicated requires replacement.

    ipv4IpamPoolId string
    The ID of an IPv4 IPAM pool you want to use for allocating this VPC's CIDR. For more information, see What is IPAM? in the Amazon VPC IPAM User Guide. You must specify eitherCidrBlock or Ipv4IpamPoolId.
    ipv4NetmaskLength number
    The netmask length of the IPv4 CIDR you want to allocate to this VPC from an Amazon VPC IP Address Manager (IPAM) pool. For more information about IPAM, see What is IPAM? in the Amazon VPC IPAM User Guide.
    tags Tag[]
    The tags for the VPC.
    vpcEncryptionControl VpcEncryptionControl
    Describes the configuration and state of VPC encryption controls. For more information, see Enforce VPC encryption in transit in the Amazon VPC User Guide.
    cidr_block str
    The IPv4 network range for the VPC, in CIDR notation. For example, 10.0.0.0/16. We modify the specified CIDR block to its canonical form; for example, if you specify 100.68.0.18/18, we modify it to 100.68.0.0/18. You must specify eitherCidrBlock or Ipv4IpamPoolId.
    enable_dns_hostnames bool
    Indicates whether the instances launched in the VPC get DNS hostnames. If enabled, instances in the VPC get DNS hostnames; otherwise, they do not. Disabled by default for nondefault VPCs. For more information, see DNS attributes in your VPC. You can only enable DNS hostnames if you've enabled DNS support.
    enable_dns_support bool
    Indicates whether the DNS resolution is supported for the VPC. If enabled, queries to the Amazon provided DNS server at the 169.254.169.253 IP address, or the reserved IP address at the base of the VPC network range "plus two" succeed. If disabled, the Amazon provided DNS service in the VPC that resolves public DNS hostnames to IP addresses is not enabled. Enabled by default. For more information, see DNS attributes in your VPC.
    instance_tenancy str

    The allowed tenancy of instances launched into the VPC.

    • default: An instance launched into the VPC runs on shared hardware by default, unless you explicitly specify a different tenancy during instance launch.
    • dedicated: An instance launched into the VPC runs on dedicated hardware by default, unless you explicitly specify a tenancy of host during instance launch. You cannot specify a tenancy of default during instance launch.

    Updating InstanceTenancy requires no replacement only if you are updating its value from dedicated to default. Updating InstanceTenancy from default to dedicated requires replacement.

    ipv4_ipam_pool_id str
    The ID of an IPv4 IPAM pool you want to use for allocating this VPC's CIDR. For more information, see What is IPAM? in the Amazon VPC IPAM User Guide. You must specify eitherCidrBlock or Ipv4IpamPoolId.
    ipv4_netmask_length int
    The netmask length of the IPv4 CIDR you want to allocate to this VPC from an Amazon VPC IP Address Manager (IPAM) pool. For more information about IPAM, see What is IPAM? in the Amazon VPC IPAM User Guide.
    tags Sequence[TagArgs]
    The tags for the VPC.
    vpc_encryption_control VpcEncryptionControlArgs
    Describes the configuration and state of VPC encryption controls. For more information, see Enforce VPC encryption in transit in the Amazon VPC User Guide.
    cidrBlock String
    The IPv4 network range for the VPC, in CIDR notation. For example, 10.0.0.0/16. We modify the specified CIDR block to its canonical form; for example, if you specify 100.68.0.18/18, we modify it to 100.68.0.0/18. You must specify eitherCidrBlock or Ipv4IpamPoolId.
    enableDnsHostnames Boolean
    Indicates whether the instances launched in the VPC get DNS hostnames. If enabled, instances in the VPC get DNS hostnames; otherwise, they do not. Disabled by default for nondefault VPCs. For more information, see DNS attributes in your VPC. You can only enable DNS hostnames if you've enabled DNS support.
    enableDnsSupport Boolean
    Indicates whether the DNS resolution is supported for the VPC. If enabled, queries to the Amazon provided DNS server at the 169.254.169.253 IP address, or the reserved IP address at the base of the VPC network range "plus two" succeed. If disabled, the Amazon provided DNS service in the VPC that resolves public DNS hostnames to IP addresses is not enabled. Enabled by default. For more information, see DNS attributes in your VPC.
    instanceTenancy String

    The allowed tenancy of instances launched into the VPC.

    • default: An instance launched into the VPC runs on shared hardware by default, unless you explicitly specify a different tenancy during instance launch.
    • dedicated: An instance launched into the VPC runs on dedicated hardware by default, unless you explicitly specify a tenancy of host during instance launch. You cannot specify a tenancy of default during instance launch.

    Updating InstanceTenancy requires no replacement only if you are updating its value from dedicated to default. Updating InstanceTenancy from default to dedicated requires replacement.

    ipv4IpamPoolId String
    The ID of an IPv4 IPAM pool you want to use for allocating this VPC's CIDR. For more information, see What is IPAM? in the Amazon VPC IPAM User Guide. You must specify eitherCidrBlock or Ipv4IpamPoolId.
    ipv4NetmaskLength Number
    The netmask length of the IPv4 CIDR you want to allocate to this VPC from an Amazon VPC IP Address Manager (IPAM) pool. For more information about IPAM, see What is IPAM? in the Amazon VPC IPAM User Guide.
    tags List<Property Map>
    The tags for the VPC.
    vpcEncryptionControl Property Map
    Describes the configuration and state of VPC encryption controls. For more information, see Enforce VPC encryption in transit in the Amazon VPC User Guide.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Vpc resource produces the following output properties:

    CidrBlockAssociations List<string>
    The association IDs of the IPv4 CIDR blocks for the VPC. For example, [ vpc-cidr-assoc-0280ab6b ].
    DefaultNetworkAcl string
    The ID of the default network ACL for the VPC. For example, acl-814dafe3.
    DefaultSecurityGroup string
    The ID of the default security group for the VPC. For example, sg-b178e0d3.
    Id string
    The provider-assigned unique ID for this managed resource.
    Ipv6CidrBlocks List<string>
    The IPv6 CIDR blocks for the VPC. For example, [ 2001:db8:1234:1a00::/56 ].
    VpcId string
    The ID of the VPC.
    CidrBlockAssociations []string
    The association IDs of the IPv4 CIDR blocks for the VPC. For example, [ vpc-cidr-assoc-0280ab6b ].
    DefaultNetworkAcl string
    The ID of the default network ACL for the VPC. For example, acl-814dafe3.
    DefaultSecurityGroup string
    The ID of the default security group for the VPC. For example, sg-b178e0d3.
    Id string
    The provider-assigned unique ID for this managed resource.
    Ipv6CidrBlocks []string
    The IPv6 CIDR blocks for the VPC. For example, [ 2001:db8:1234:1a00::/56 ].
    VpcId string
    The ID of the VPC.
    cidr_block_associations list(string)
    The association IDs of the IPv4 CIDR blocks for the VPC. For example, [ vpc-cidr-assoc-0280ab6b ].
    default_network_acl string
    The ID of the default network ACL for the VPC. For example, acl-814dafe3.
    default_security_group string
    The ID of the default security group for the VPC. For example, sg-b178e0d3.
    id string
    The provider-assigned unique ID for this managed resource.
    ipv6_cidr_blocks list(string)
    The IPv6 CIDR blocks for the VPC. For example, [ 2001:db8:1234:1a00::/56 ].
    vpc_id string
    The ID of the VPC.
    cidrBlockAssociations List<String>
    The association IDs of the IPv4 CIDR blocks for the VPC. For example, [ vpc-cidr-assoc-0280ab6b ].
    defaultNetworkAcl String
    The ID of the default network ACL for the VPC. For example, acl-814dafe3.
    defaultSecurityGroup String
    The ID of the default security group for the VPC. For example, sg-b178e0d3.
    id String
    The provider-assigned unique ID for this managed resource.
    ipv6CidrBlocks List<String>
    The IPv6 CIDR blocks for the VPC. For example, [ 2001:db8:1234:1a00::/56 ].
    vpcId String
    The ID of the VPC.
    cidrBlockAssociations string[]
    The association IDs of the IPv4 CIDR blocks for the VPC. For example, [ vpc-cidr-assoc-0280ab6b ].
    defaultNetworkAcl string
    The ID of the default network ACL for the VPC. For example, acl-814dafe3.
    defaultSecurityGroup string
    The ID of the default security group for the VPC. For example, sg-b178e0d3.
    id string
    The provider-assigned unique ID for this managed resource.
    ipv6CidrBlocks string[]
    The IPv6 CIDR blocks for the VPC. For example, [ 2001:db8:1234:1a00::/56 ].
    vpcId string
    The ID of the VPC.
    cidr_block_associations Sequence[str]
    The association IDs of the IPv4 CIDR blocks for the VPC. For example, [ vpc-cidr-assoc-0280ab6b ].
    default_network_acl str
    The ID of the default network ACL for the VPC. For example, acl-814dafe3.
    default_security_group str
    The ID of the default security group for the VPC. For example, sg-b178e0d3.
    id str
    The provider-assigned unique ID for this managed resource.
    ipv6_cidr_blocks Sequence[str]
    The IPv6 CIDR blocks for the VPC. For example, [ 2001:db8:1234:1a00::/56 ].
    vpc_id str
    The ID of the VPC.
    cidrBlockAssociations List<String>
    The association IDs of the IPv4 CIDR blocks for the VPC. For example, [ vpc-cidr-assoc-0280ab6b ].
    defaultNetworkAcl String
    The ID of the default network ACL for the VPC. For example, acl-814dafe3.
    defaultSecurityGroup String
    The ID of the default security group for the VPC. For example, sg-b178e0d3.
    id String
    The provider-assigned unique ID for this managed resource.
    ipv6CidrBlocks List<String>
    The IPv6 CIDR blocks for the VPC. For example, [ 2001:db8:1234:1a00::/56 ].
    vpcId String
    The ID of the VPC.

    Supporting Types

    Tag, TagArgs

    A set of tags to apply to the resource.
    Key string
    The key name of the tag
    Value string
    The value of the tag
    Key string
    The key name of the tag
    Value string
    The value of the tag
    key string
    The key name of the tag
    value string
    The value of the tag
    key String
    The key name of the tag
    value String
    The value of the tag
    key string
    The key name of the tag
    value string
    The value of the tag
    key str
    The key name of the tag
    value str
    The value of the tag
    key String
    The key name of the tag
    value String
    The value of the tag

    VpcEncryptionControl, VpcEncryptionControlArgs

    Describes the configuration and state of VPC encryption controls. For more information, see Enforce VPC encryption in transit in the Amazon VPC User Guide.
    EgressOnlyInternetGatewayExclusion Pulumi.AwsNative.Ec2.VpcEncryptionControlEgressOnlyInternetGatewayExclusion
    ElasticFileSystemExclusion Pulumi.AwsNative.Ec2.VpcEncryptionControlElasticFileSystemExclusion
    InternetGatewayExclusion Pulumi.AwsNative.Ec2.VpcEncryptionControlInternetGatewayExclusion
    LambdaExclusion Pulumi.AwsNative.Ec2.VpcEncryptionControlLambdaExclusion
    Mode Pulumi.AwsNative.Ec2.VpcEncryptionControlMode
    The encryption mode for the VPC Encryption Control configuration.
    NatGatewayExclusion Pulumi.AwsNative.Ec2.VpcEncryptionControlNatGatewayExclusion
    ResourceExclusions Pulumi.AwsNative.Ec2.Inputs.VpcEncryptionControlExclusions
    Information about resource exclusions for the VPC Encryption Control configuration.
    State string
    The current state of the VPC Encryption Control configuration.
    StateMessage string
    A message providing additional information about the encryption control state.
    VirtualPrivateGatewayExclusion Pulumi.AwsNative.Ec2.VpcEncryptionControlVirtualPrivateGatewayExclusion
    VpcEncryptionControlId string
    The ID of the VPC Encryption Control configuration.
    VpcId string
    The ID of the VPC associated with the encryption control configuration.
    VpcLatticeExclusion Pulumi.AwsNative.Ec2.VpcEncryptionControlVpcLatticeExclusion
    VpcPeeringExclusion Pulumi.AwsNative.Ec2.VpcEncryptionControlVpcPeeringExclusion
    EgressOnlyInternetGatewayExclusion VpcEncryptionControlEgressOnlyInternetGatewayExclusion
    ElasticFileSystemExclusion VpcEncryptionControlElasticFileSystemExclusion
    InternetGatewayExclusion VpcEncryptionControlInternetGatewayExclusion
    LambdaExclusion VpcEncryptionControlLambdaExclusion
    Mode VpcEncryptionControlMode
    The encryption mode for the VPC Encryption Control configuration.
    NatGatewayExclusion VpcEncryptionControlNatGatewayExclusion
    ResourceExclusions VpcEncryptionControlExclusions
    Information about resource exclusions for the VPC Encryption Control configuration.
    State string
    The current state of the VPC Encryption Control configuration.
    StateMessage string
    A message providing additional information about the encryption control state.
    VirtualPrivateGatewayExclusion VpcEncryptionControlVirtualPrivateGatewayExclusion
    VpcEncryptionControlId string
    The ID of the VPC Encryption Control configuration.
    VpcId string
    The ID of the VPC associated with the encryption control configuration.
    VpcLatticeExclusion VpcEncryptionControlVpcLatticeExclusion
    VpcPeeringExclusion VpcEncryptionControlVpcPeeringExclusion
    egress_only_internet_gateway_exclusion "enable" | "disable"
    elastic_file_system_exclusion "enable" | "disable"
    internet_gateway_exclusion "enable" | "disable"
    lambda_exclusion "enable" | "disable"
    mode "monitor" | "enforce"
    The encryption mode for the VPC Encryption Control configuration.
    nat_gateway_exclusion "enable" | "disable"
    resource_exclusions object
    Information about resource exclusions for the VPC Encryption Control configuration.
    state string
    The current state of the VPC Encryption Control configuration.
    state_message string
    A message providing additional information about the encryption control state.
    virtual_private_gateway_exclusion "enable" | "disable"
    vpc_encryption_control_id string
    The ID of the VPC Encryption Control configuration.
    vpc_id string
    The ID of the VPC associated with the encryption control configuration.
    vpc_lattice_exclusion "enable" | "disable"
    vpc_peering_exclusion "enable" | "disable"
    egressOnlyInternetGatewayExclusion VpcEncryptionControlEgressOnlyInternetGatewayExclusion
    elasticFileSystemExclusion VpcEncryptionControlElasticFileSystemExclusion
    internetGatewayExclusion VpcEncryptionControlInternetGatewayExclusion
    lambdaExclusion VpcEncryptionControlLambdaExclusion
    mode VpcEncryptionControlMode
    The encryption mode for the VPC Encryption Control configuration.
    natGatewayExclusion VpcEncryptionControlNatGatewayExclusion
    resourceExclusions VpcEncryptionControlExclusions
    Information about resource exclusions for the VPC Encryption Control configuration.
    state String
    The current state of the VPC Encryption Control configuration.
    stateMessage String
    A message providing additional information about the encryption control state.
    virtualPrivateGatewayExclusion VpcEncryptionControlVirtualPrivateGatewayExclusion
    vpcEncryptionControlId String
    The ID of the VPC Encryption Control configuration.
    vpcId String
    The ID of the VPC associated with the encryption control configuration.
    vpcLatticeExclusion VpcEncryptionControlVpcLatticeExclusion
    vpcPeeringExclusion VpcEncryptionControlVpcPeeringExclusion
    egressOnlyInternetGatewayExclusion VpcEncryptionControlEgressOnlyInternetGatewayExclusion
    elasticFileSystemExclusion VpcEncryptionControlElasticFileSystemExclusion
    internetGatewayExclusion VpcEncryptionControlInternetGatewayExclusion
    lambdaExclusion VpcEncryptionControlLambdaExclusion
    mode VpcEncryptionControlMode
    The encryption mode for the VPC Encryption Control configuration.
    natGatewayExclusion VpcEncryptionControlNatGatewayExclusion
    resourceExclusions VpcEncryptionControlExclusions
    Information about resource exclusions for the VPC Encryption Control configuration.
    state string
    The current state of the VPC Encryption Control configuration.
    stateMessage string
    A message providing additional information about the encryption control state.
    virtualPrivateGatewayExclusion VpcEncryptionControlVirtualPrivateGatewayExclusion
    vpcEncryptionControlId string
    The ID of the VPC Encryption Control configuration.
    vpcId string
    The ID of the VPC associated with the encryption control configuration.
    vpcLatticeExclusion VpcEncryptionControlVpcLatticeExclusion
    vpcPeeringExclusion VpcEncryptionControlVpcPeeringExclusion
    egress_only_internet_gateway_exclusion VpcEncryptionControlEgressOnlyInternetGatewayExclusion
    elastic_file_system_exclusion VpcEncryptionControlElasticFileSystemExclusion
    internet_gateway_exclusion VpcEncryptionControlInternetGatewayExclusion
    lambda_exclusion VpcEncryptionControlLambdaExclusion
    mode VpcEncryptionControlMode
    The encryption mode for the VPC Encryption Control configuration.
    nat_gateway_exclusion VpcEncryptionControlNatGatewayExclusion
    resource_exclusions VpcEncryptionControlExclusions
    Information about resource exclusions for the VPC Encryption Control configuration.
    state str
    The current state of the VPC Encryption Control configuration.
    state_message str
    A message providing additional information about the encryption control state.
    virtual_private_gateway_exclusion VpcEncryptionControlVirtualPrivateGatewayExclusion
    vpc_encryption_control_id str
    The ID of the VPC Encryption Control configuration.
    vpc_id str
    The ID of the VPC associated with the encryption control configuration.
    vpc_lattice_exclusion VpcEncryptionControlVpcLatticeExclusion
    vpc_peering_exclusion VpcEncryptionControlVpcPeeringExclusion
    egressOnlyInternetGatewayExclusion "enable" | "disable"
    elasticFileSystemExclusion "enable" | "disable"
    internetGatewayExclusion "enable" | "disable"
    lambdaExclusion "enable" | "disable"
    mode "monitor" | "enforce"
    The encryption mode for the VPC Encryption Control configuration.
    natGatewayExclusion "enable" | "disable"
    resourceExclusions Property Map
    Information about resource exclusions for the VPC Encryption Control configuration.
    state String
    The current state of the VPC Encryption Control configuration.
    stateMessage String
    A message providing additional information about the encryption control state.
    virtualPrivateGatewayExclusion "enable" | "disable"
    vpcEncryptionControlId String
    The ID of the VPC Encryption Control configuration.
    vpcId String
    The ID of the VPC associated with the encryption control configuration.
    vpcLatticeExclusion "enable" | "disable"
    vpcPeeringExclusion "enable" | "disable"

    VpcEncryptionControlEgressOnlyInternetGatewayExclusion, VpcEncryptionControlEgressOnlyInternetGatewayExclusionArgs

    Enable
    enable
    Disable
    disable
    VpcEncryptionControlEgressOnlyInternetGatewayExclusionEnable
    enable
    VpcEncryptionControlEgressOnlyInternetGatewayExclusionDisable
    disable
    "enable"
    enable
    "disable"
    disable
    Enable
    enable
    Disable
    disable
    Enable
    enable
    Disable
    disable
    ENABLE
    enable
    DISABLE
    disable
    "enable"
    enable
    "disable"
    disable

    VpcEncryptionControlElasticFileSystemExclusion, VpcEncryptionControlElasticFileSystemExclusionArgs

    Enable
    enable
    Disable
    disable
    VpcEncryptionControlElasticFileSystemExclusionEnable
    enable
    VpcEncryptionControlElasticFileSystemExclusionDisable
    disable
    "enable"
    enable
    "disable"
    disable
    Enable
    enable
    Disable
    disable
    Enable
    enable
    Disable
    disable
    ENABLE
    enable
    DISABLE
    disable
    "enable"
    enable
    "disable"
    disable

    VpcEncryptionControlExclusion, VpcEncryptionControlExclusionArgs

    State string
    The current state of the exclusion configuration.
    StateMessage string
    A message providing additional information about the exclusion state.
    State string
    The current state of the exclusion configuration.
    StateMessage string
    A message providing additional information about the exclusion state.
    state string
    The current state of the exclusion configuration.
    state_message string
    A message providing additional information about the exclusion state.
    state String
    The current state of the exclusion configuration.
    stateMessage String
    A message providing additional information about the exclusion state.
    state string
    The current state of the exclusion configuration.
    stateMessage string
    A message providing additional information about the exclusion state.
    state str
    The current state of the exclusion configuration.
    state_message str
    A message providing additional information about the exclusion state.
    state String
    The current state of the exclusion configuration.
    stateMessage String
    A message providing additional information about the exclusion state.

    VpcEncryptionControlExclusions, VpcEncryptionControlExclusionsArgs

    Describes the exclusion configurations for various resource types in VPC Encryption Control. For more information, see Enforce VPC encryption in transit in the Amazon VPC User Guide.
    EgressOnlyInternetGateway Pulumi.AwsNative.Ec2.Inputs.VpcEncryptionControlExclusion
    The exclusion configuration for egress-only internet gateway traffic.
    ElasticFileSystem Pulumi.AwsNative.Ec2.Inputs.VpcEncryptionControlExclusion
    The exclusion configuration for Elastic File System traffic.
    InternetGateway Pulumi.AwsNative.Ec2.Inputs.VpcEncryptionControlExclusion
    The exclusion configuration for internet gateway traffic.
    Lambda Pulumi.AwsNative.Ec2.Inputs.VpcEncryptionControlExclusion
    The exclusion configuration for Lambda function traffic.
    NatGateway Pulumi.AwsNative.Ec2.Inputs.VpcEncryptionControlExclusion
    The exclusion configuration for NAT gateway traffic.
    VirtualPrivateGateway Pulumi.AwsNative.Ec2.Inputs.VpcEncryptionControlExclusion
    The exclusion configuration for virtual private gateway traffic.
    VpcLattice Pulumi.AwsNative.Ec2.Inputs.VpcEncryptionControlExclusion
    The exclusion configuration for VPC Lattice traffic.
    VpcPeering Pulumi.AwsNative.Ec2.Inputs.VpcEncryptionControlExclusion
    The exclusion configuration for VPC peering connection traffic.
    EgressOnlyInternetGateway VpcEncryptionControlExclusion
    The exclusion configuration for egress-only internet gateway traffic.
    ElasticFileSystem VpcEncryptionControlExclusion
    The exclusion configuration for Elastic File System traffic.
    InternetGateway VpcEncryptionControlExclusion
    The exclusion configuration for internet gateway traffic.
    Lambda VpcEncryptionControlExclusion
    The exclusion configuration for Lambda function traffic.
    NatGateway VpcEncryptionControlExclusion
    The exclusion configuration for NAT gateway traffic.
    VirtualPrivateGateway VpcEncryptionControlExclusion
    The exclusion configuration for virtual private gateway traffic.
    VpcLattice VpcEncryptionControlExclusion
    The exclusion configuration for VPC Lattice traffic.
    VpcPeering VpcEncryptionControlExclusion
    The exclusion configuration for VPC peering connection traffic.
    egress_only_internet_gateway object
    The exclusion configuration for egress-only internet gateway traffic.
    elastic_file_system object
    The exclusion configuration for Elastic File System traffic.
    internet_gateway object
    The exclusion configuration for internet gateway traffic.
    lambda object
    The exclusion configuration for Lambda function traffic.
    nat_gateway object
    The exclusion configuration for NAT gateway traffic.
    virtual_private_gateway object
    The exclusion configuration for virtual private gateway traffic.
    vpc_lattice object
    The exclusion configuration for VPC Lattice traffic.
    vpc_peering object
    The exclusion configuration for VPC peering connection traffic.
    egressOnlyInternetGateway VpcEncryptionControlExclusion
    The exclusion configuration for egress-only internet gateway traffic.
    elasticFileSystem VpcEncryptionControlExclusion
    The exclusion configuration for Elastic File System traffic.
    internetGateway VpcEncryptionControlExclusion
    The exclusion configuration for internet gateway traffic.
    lambda VpcEncryptionControlExclusion
    The exclusion configuration for Lambda function traffic.
    natGateway VpcEncryptionControlExclusion
    The exclusion configuration for NAT gateway traffic.
    virtualPrivateGateway VpcEncryptionControlExclusion
    The exclusion configuration for virtual private gateway traffic.
    vpcLattice VpcEncryptionControlExclusion
    The exclusion configuration for VPC Lattice traffic.
    vpcPeering VpcEncryptionControlExclusion
    The exclusion configuration for VPC peering connection traffic.
    egressOnlyInternetGateway VpcEncryptionControlExclusion
    The exclusion configuration for egress-only internet gateway traffic.
    elasticFileSystem VpcEncryptionControlExclusion
    The exclusion configuration for Elastic File System traffic.
    internetGateway VpcEncryptionControlExclusion
    The exclusion configuration for internet gateway traffic.
    lambda VpcEncryptionControlExclusion
    The exclusion configuration for Lambda function traffic.
    natGateway VpcEncryptionControlExclusion
    The exclusion configuration for NAT gateway traffic.
    virtualPrivateGateway VpcEncryptionControlExclusion
    The exclusion configuration for virtual private gateway traffic.
    vpcLattice VpcEncryptionControlExclusion
    The exclusion configuration for VPC Lattice traffic.
    vpcPeering VpcEncryptionControlExclusion
    The exclusion configuration for VPC peering connection traffic.
    egress_only_internet_gateway VpcEncryptionControlExclusion
    The exclusion configuration for egress-only internet gateway traffic.
    elastic_file_system VpcEncryptionControlExclusion
    The exclusion configuration for Elastic File System traffic.
    internet_gateway VpcEncryptionControlExclusion
    The exclusion configuration for internet gateway traffic.
    lambda_ VpcEncryptionControlExclusion
    The exclusion configuration for Lambda function traffic.
    nat_gateway VpcEncryptionControlExclusion
    The exclusion configuration for NAT gateway traffic.
    virtual_private_gateway VpcEncryptionControlExclusion
    The exclusion configuration for virtual private gateway traffic.
    vpc_lattice VpcEncryptionControlExclusion
    The exclusion configuration for VPC Lattice traffic.
    vpc_peering VpcEncryptionControlExclusion
    The exclusion configuration for VPC peering connection traffic.
    egressOnlyInternetGateway Property Map
    The exclusion configuration for egress-only internet gateway traffic.
    elasticFileSystem Property Map
    The exclusion configuration for Elastic File System traffic.
    internetGateway Property Map
    The exclusion configuration for internet gateway traffic.
    lambda Property Map
    The exclusion configuration for Lambda function traffic.
    natGateway Property Map
    The exclusion configuration for NAT gateway traffic.
    virtualPrivateGateway Property Map
    The exclusion configuration for virtual private gateway traffic.
    vpcLattice Property Map
    The exclusion configuration for VPC Lattice traffic.
    vpcPeering Property Map
    The exclusion configuration for VPC peering connection traffic.

    VpcEncryptionControlInternetGatewayExclusion, VpcEncryptionControlInternetGatewayExclusionArgs

    Enable
    enable
    Disable
    disable
    VpcEncryptionControlInternetGatewayExclusionEnable
    enable
    VpcEncryptionControlInternetGatewayExclusionDisable
    disable
    "enable"
    enable
    "disable"
    disable
    Enable
    enable
    Disable
    disable
    Enable
    enable
    Disable
    disable
    ENABLE
    enable
    DISABLE
    disable
    "enable"
    enable
    "disable"
    disable

    VpcEncryptionControlLambdaExclusion, VpcEncryptionControlLambdaExclusionArgs

    Enable
    enable
    Disable
    disable
    VpcEncryptionControlLambdaExclusionEnable
    enable
    VpcEncryptionControlLambdaExclusionDisable
    disable
    "enable"
    enable
    "disable"
    disable
    Enable
    enable
    Disable
    disable
    Enable
    enable
    Disable
    disable
    ENABLE
    enable
    DISABLE
    disable
    "enable"
    enable
    "disable"
    disable

    VpcEncryptionControlMode, VpcEncryptionControlModeArgs

    Monitor
    monitor
    Enforce
    enforce
    VpcEncryptionControlModeMonitor
    monitor
    VpcEncryptionControlModeEnforce
    enforce
    "monitor"
    monitor
    "enforce"
    enforce
    Monitor
    monitor
    Enforce
    enforce
    Monitor
    monitor
    Enforce
    enforce
    MONITOR
    monitor
    ENFORCE
    enforce
    "monitor"
    monitor
    "enforce"
    enforce

    VpcEncryptionControlNatGatewayExclusion, VpcEncryptionControlNatGatewayExclusionArgs

    Enable
    enable
    Disable
    disable
    VpcEncryptionControlNatGatewayExclusionEnable
    enable
    VpcEncryptionControlNatGatewayExclusionDisable
    disable
    "enable"
    enable
    "disable"
    disable
    Enable
    enable
    Disable
    disable
    Enable
    enable
    Disable
    disable
    ENABLE
    enable
    DISABLE
    disable
    "enable"
    enable
    "disable"
    disable

    VpcEncryptionControlVirtualPrivateGatewayExclusion, VpcEncryptionControlVirtualPrivateGatewayExclusionArgs

    Enable
    enable
    Disable
    disable
    VpcEncryptionControlVirtualPrivateGatewayExclusionEnable
    enable
    VpcEncryptionControlVirtualPrivateGatewayExclusionDisable
    disable
    "enable"
    enable
    "disable"
    disable
    Enable
    enable
    Disable
    disable
    Enable
    enable
    Disable
    disable
    ENABLE
    enable
    DISABLE
    disable
    "enable"
    enable
    "disable"
    disable

    VpcEncryptionControlVpcLatticeExclusion, VpcEncryptionControlVpcLatticeExclusionArgs

    Enable
    enable
    Disable
    disable
    VpcEncryptionControlVpcLatticeExclusionEnable
    enable
    VpcEncryptionControlVpcLatticeExclusionDisable
    disable
    "enable"
    enable
    "disable"
    disable
    Enable
    enable
    Disable
    disable
    Enable
    enable
    Disable
    disable
    ENABLE
    enable
    DISABLE
    disable
    "enable"
    enable
    "disable"
    disable

    VpcEncryptionControlVpcPeeringExclusion, VpcEncryptionControlVpcPeeringExclusionArgs

    Enable
    enable
    Disable
    disable
    VpcEncryptionControlVpcPeeringExclusionEnable
    enable
    VpcEncryptionControlVpcPeeringExclusionDisable
    disable
    "enable"
    enable
    "disable"
    disable
    Enable
    enable
    Disable
    disable
    Enable
    enable
    Disable
    disable
    ENABLE
    enable
    DISABLE
    disable
    "enable"
    enable
    "disable"
    disable

    Package Details

    Repository
    AWS Native pulumi/pulumi-aws-native
    License
    Apache-2.0
    aws-native logo aws-native logo

    We recommend new projects start with resources from the AWS provider.

    Viewing docs for AWS Cloud Control v1.76.0
    published on Monday, Aug 24, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-aws-native

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial