1. Packages
  2. AWS Cloud Control
  3. API Docs
  4. ec2
  5. VpcEncryptionControl

We recommend new projects start with resources from the AWS provider.

AWS Cloud Control v1.44.0 published on Friday, Dec 19, 2025 by Pulumi
Schema (JSON)
pulumi/pulumi-aws-native

aws-native.ec2.VpcEncryptionControl

aws-native logo

We recommend new projects start with resources from the AWS provider.

AWS Cloud Control v1.44.0 published on Friday, Dec 19, 2025 by Pulumi
Schema (JSON)
pulumi/pulumi-aws-native

    Resource Type definition for AWS::EC2::VPCEncryptionControl

    Create VpcEncryptionControl Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new VpcEncryptionControl(name: string, args?: VpcEncryptionControlArgs, opts?: CustomResourceOptions);
    @overload
def VpcEncryptionControl(resource_name: str,
                         args: Optional[VpcEncryptionControlArgs] = None,
                         opts: Optional[ResourceOptions] = None)

@overload
def VpcEncryptionControl(resource_name: str,
                         opts: Optional[ResourceOptions] = None,
                         egress_only_internet_gateway_exclusion_input: Optional[VpcEncryptionControlEgressOnlyInternetGatewayExclusionInput] = None,
                         elastic_file_system_exclusion_input: Optional[VpcEncryptionControlElasticFileSystemExclusionInput] = None,
                         internet_gateway_exclusion_input: Optional[VpcEncryptionControlInternetGatewayExclusionInput] = None,
                         lambda_exclusion_input: Optional[VpcEncryptionControlLambdaExclusionInput] = None,
                         mode: Optional[VpcEncryptionControlMode] = None,
                         nat_gateway_exclusion_input: Optional[VpcEncryptionControlNatGatewayExclusionInput] = None,
                         tags: Optional[Sequence[_root_inputs.TagArgs]] = None,
                         virtual_private_gateway_exclusion_input: Optional[VpcEncryptionControlVirtualPrivateGatewayExclusionInput] = None,
                         vpc_id: Optional[str] = None,
                         vpc_lattice_exclusion_input: Optional[VpcEncryptionControlVpcLatticeExclusionInput] = None,
                         vpc_peering_exclusion_input: Optional[VpcEncryptionControlVpcPeeringExclusionInput] = None)
    func NewVpcEncryptionControl(ctx *Context, name string, args *VpcEncryptionControlArgs, opts ...ResourceOption) (*VpcEncryptionControl, error)
    public VpcEncryptionControl(string name, VpcEncryptionControlArgs? args = null, CustomResourceOptions? opts = null)
    public VpcEncryptionControl(String name, VpcEncryptionControlArgs args)
public VpcEncryptionControl(String name, VpcEncryptionControlArgs args, CustomResourceOptions options)

    type: aws-native:ec2:VpcEncryptionControl
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args VpcEncryptionControlArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args VpcEncryptionControlArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args VpcEncryptionControlArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args VpcEncryptionControlArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args VpcEncryptionControlArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    VpcEncryptionControl Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The VpcEncryptionControl resource accepts the following input properties:

    EgressOnlyInternetGatewayExclusionInput Pulumi.AwsNative.Ec2.VpcEncryptionControlEgressOnlyInternetGatewayExclusionInput
    Used to enable or disable EIGW exclusion
    ElasticFileSystemExclusionInput Pulumi.AwsNative.Ec2.VpcEncryptionControlElasticFileSystemExclusionInput
    Used to enable or disable EFS exclusion
    InternetGatewayExclusionInput Pulumi.AwsNative.Ec2.VpcEncryptionControlInternetGatewayExclusionInput
    Used to enable or disable IGW exclusion
    LambdaExclusionInput Pulumi.AwsNative.Ec2.VpcEncryptionControlLambdaExclusionInput
    Used to enable or disable Lambda exclusion
    Mode Pulumi.AwsNative.Ec2.VpcEncryptionControlMode
    The VPC encryption control mode, either monitor or enforce.
    NatGatewayExclusionInput Pulumi.AwsNative.Ec2.VpcEncryptionControlNatGatewayExclusionInput
    Used to enable or disable Nat gateway exclusion
    Tags List<Pulumi.AwsNative.Inputs.Tag>
    The tags to assign to the VPC encryption control.
    VirtualPrivateGatewayExclusionInput Pulumi.AwsNative.Ec2.VpcEncryptionControlVirtualPrivateGatewayExclusionInput
    Used to enable or disable VGW exclusion
    VpcId string
    The VPC on which this VPC encryption control is applied.
    VpcLatticeExclusionInput Pulumi.AwsNative.Ec2.VpcEncryptionControlVpcLatticeExclusionInput
    Used to enable or disable Vpc Lattice exclusion
    VpcPeeringExclusionInput Pulumi.AwsNative.Ec2.VpcEncryptionControlVpcPeeringExclusionInput
    Used to enable or disable VPC peering exclusion
    EgressOnlyInternetGatewayExclusionInput VpcEncryptionControlEgressOnlyInternetGatewayExclusionInput
    Used to enable or disable EIGW exclusion
    ElasticFileSystemExclusionInput VpcEncryptionControlElasticFileSystemExclusionInput
    Used to enable or disable EFS exclusion
    InternetGatewayExclusionInput VpcEncryptionControlInternetGatewayExclusionInput
    Used to enable or disable IGW exclusion
    LambdaExclusionInput VpcEncryptionControlLambdaExclusionInput
    Used to enable or disable Lambda exclusion
    Mode VpcEncryptionControlMode
    The VPC encryption control mode, either monitor or enforce.
    NatGatewayExclusionInput VpcEncryptionControlNatGatewayExclusionInput
    Used to enable or disable Nat gateway exclusion
    Tags TagArgs
    The tags to assign to the VPC encryption control.
    VirtualPrivateGatewayExclusionInput VpcEncryptionControlVirtualPrivateGatewayExclusionInput
    Used to enable or disable VGW exclusion
    VpcId string
    The VPC on which this VPC encryption control is applied.
    VpcLatticeExclusionInput VpcEncryptionControlVpcLatticeExclusionInput
    Used to enable or disable Vpc Lattice exclusion
    VpcPeeringExclusionInput VpcEncryptionControlVpcPeeringExclusionInput
    Used to enable or disable VPC peering exclusion
    egressOnlyInternetGatewayExclusionInput VpcEncryptionControlEgressOnlyInternetGatewayExclusionInput
    Used to enable or disable EIGW exclusion
    elasticFileSystemExclusionInput VpcEncryptionControlElasticFileSystemExclusionInput
    Used to enable or disable EFS exclusion
    internetGatewayExclusionInput VpcEncryptionControlInternetGatewayExclusionInput
    Used to enable or disable IGW exclusion
    lambdaExclusionInput VpcEncryptionControlLambdaExclusionInput
    Used to enable or disable Lambda exclusion
    mode VpcEncryptionControlMode
    The VPC encryption control mode, either monitor or enforce.
    natGatewayExclusionInput VpcEncryptionControlNatGatewayExclusionInput
    Used to enable or disable Nat gateway exclusion
    tags List<Tag>
    The tags to assign to the VPC encryption control.
    virtualPrivateGatewayExclusionInput VpcEncryptionControlVirtualPrivateGatewayExclusionInput
    Used to enable or disable VGW exclusion
    vpcId String
    The VPC on which this VPC encryption control is applied.
    vpcLatticeExclusionInput VpcEncryptionControlVpcLatticeExclusionInput
    Used to enable or disable Vpc Lattice exclusion
    vpcPeeringExclusionInput VpcEncryptionControlVpcPeeringExclusionInput
    Used to enable or disable VPC peering exclusion
    egressOnlyInternetGatewayExclusionInput VpcEncryptionControlEgressOnlyInternetGatewayExclusionInput
    Used to enable or disable EIGW exclusion
    elasticFileSystemExclusionInput VpcEncryptionControlElasticFileSystemExclusionInput
    Used to enable or disable EFS exclusion
    internetGatewayExclusionInput VpcEncryptionControlInternetGatewayExclusionInput
    Used to enable or disable IGW exclusion
    lambdaExclusionInput VpcEncryptionControlLambdaExclusionInput
    Used to enable or disable Lambda exclusion
    mode VpcEncryptionControlMode
    The VPC encryption control mode, either monitor or enforce.
    natGatewayExclusionInput VpcEncryptionControlNatGatewayExclusionInput
    Used to enable or disable Nat gateway exclusion
    tags Tag[]
    The tags to assign to the VPC encryption control.
    virtualPrivateGatewayExclusionInput VpcEncryptionControlVirtualPrivateGatewayExclusionInput
    Used to enable or disable VGW exclusion
    vpcId string
    The VPC on which this VPC encryption control is applied.
    vpcLatticeExclusionInput VpcEncryptionControlVpcLatticeExclusionInput
    Used to enable or disable Vpc Lattice exclusion
    vpcPeeringExclusionInput VpcEncryptionControlVpcPeeringExclusionInput
    Used to enable or disable VPC peering exclusion
    egress_only_internet_gateway_exclusion_input VpcEncryptionControlEgressOnlyInternetGatewayExclusionInput
    Used to enable or disable EIGW exclusion
    elastic_file_system_exclusion_input VpcEncryptionControlElasticFileSystemExclusionInput
    Used to enable or disable EFS exclusion
    internet_gateway_exclusion_input VpcEncryptionControlInternetGatewayExclusionInput
    Used to enable or disable IGW exclusion
    lambda_exclusion_input VpcEncryptionControlLambdaExclusionInput
    Used to enable or disable Lambda exclusion
    mode VpcEncryptionControlMode
    The VPC encryption control mode, either monitor or enforce.
    nat_gateway_exclusion_input VpcEncryptionControlNatGatewayExclusionInput
    Used to enable or disable Nat gateway exclusion
    tags Sequence[TagArgs]
    The tags to assign to the VPC encryption control.
    virtual_private_gateway_exclusion_input VpcEncryptionControlVirtualPrivateGatewayExclusionInput
    Used to enable or disable VGW exclusion
    vpc_id str
    The VPC on which this VPC encryption control is applied.
    vpc_lattice_exclusion_input VpcEncryptionControlVpcLatticeExclusionInput
    Used to enable or disable Vpc Lattice exclusion
    vpc_peering_exclusion_input VpcEncryptionControlVpcPeeringExclusionInput
    Used to enable or disable VPC peering exclusion
    egressOnlyInternetGatewayExclusionInput "enable" | "disable"
    Used to enable or disable EIGW exclusion
    elasticFileSystemExclusionInput "enable" | "disable"
    Used to enable or disable EFS exclusion
    internetGatewayExclusionInput "enable" | "disable"
    Used to enable or disable IGW exclusion
    lambdaExclusionInput "enable" | "disable"
    Used to enable or disable Lambda exclusion
    mode "monitor" | "enforce"
    The VPC encryption control mode, either monitor or enforce.
    natGatewayExclusionInput "enable" | "disable"
    Used to enable or disable Nat gateway exclusion
    tags List<Property Map>
    The tags to assign to the VPC encryption control.
    virtualPrivateGatewayExclusionInput "enable" | "disable"
    Used to enable or disable VGW exclusion
    vpcId String
    The VPC on which this VPC encryption control is applied.
    vpcLatticeExclusionInput "enable" | "disable"
    Used to enable or disable Vpc Lattice exclusion
    vpcPeeringExclusionInput "enable" | "disable"
    Used to enable or disable VPC peering exclusion

    Outputs

    All input properties are implicitly available as output properties. Additionally, the VpcEncryptionControl resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    ResourceExclusions Pulumi.AwsNative.Ec2.Outputs.VpcEncryptionControlResourceExclusions
    Enumerates the states of all the VPC encryption control resource exclusions
    State Pulumi.AwsNative.Ec2.VpcEncryptionControlState
    The current state of the VPC encryption control.
    StateMessage string
    Provides additional context on the state of the VPC encryption control.
    VpcEncryptionControlId string
    The VPC encryption control resource id.
    Id string
    The provider-assigned unique ID for this managed resource.
    ResourceExclusions VpcEncryptionControlResourceExclusions
    Enumerates the states of all the VPC encryption control resource exclusions
    State VpcEncryptionControlStateEnum
    The current state of the VPC encryption control.
    StateMessage string
    Provides additional context on the state of the VPC encryption control.
    VpcEncryptionControlId string
    The VPC encryption control resource id.
    id String
    The provider-assigned unique ID for this managed resource.
    resourceExclusions VpcEncryptionControlResourceExclusions
    Enumerates the states of all the VPC encryption control resource exclusions
    state VpcEncryptionControlState
    The current state of the VPC encryption control.
    stateMessage String
    Provides additional context on the state of the VPC encryption control.
    vpcEncryptionControlId String
    The VPC encryption control resource id.
    id string
    The provider-assigned unique ID for this managed resource.
    resourceExclusions VpcEncryptionControlResourceExclusions
    Enumerates the states of all the VPC encryption control resource exclusions
    state VpcEncryptionControlState
    The current state of the VPC encryption control.
    stateMessage string
    Provides additional context on the state of the VPC encryption control.
    vpcEncryptionControlId string
    The VPC encryption control resource id.
    id str
    The provider-assigned unique ID for this managed resource.
    resource_exclusions VpcEncryptionControlResourceExclusions
    Enumerates the states of all the VPC encryption control resource exclusions
    state VpcEncryptionControlState
    The current state of the VPC encryption control.
    state_message str
    Provides additional context on the state of the VPC encryption control.
    vpc_encryption_control_id str
    The VPC encryption control resource id.
    id String
    The provider-assigned unique ID for this managed resource.
    resourceExclusions Property Map
    Enumerates the states of all the VPC encryption control resource exclusions
    state "creating" | "available" | "monitor-in-progress" | "enforce-in-progress" | "monitor-failed" | "enforce-failed" | "deleting" | "deleted" | "delete-failed"
    The current state of the VPC encryption control.
    stateMessage String
    Provides additional context on the state of the VPC encryption control.
    vpcEncryptionControlId String
    The VPC encryption control resource id.

    Supporting Types

    Tag, TagArgs

    A set of tags to apply to the resource.
    Key string
    The key name of the tag
    Value string
    The value of the tag
    Key string
    The key name of the tag
    Value string
    The value of the tag
    key String
    The key name of the tag
    value String
    The value of the tag
    key string
    The key name of the tag
    value string
    The value of the tag
    key str
    The key name of the tag
    value str
    The value of the tag
    key String
    The key name of the tag
    value String
    The value of the tag

    VpcEncryptionControlEgressOnlyInternetGatewayExclusionInput, VpcEncryptionControlEgressOnlyInternetGatewayExclusionInputArgs

    Enable
    enable
    Disable
    disable
    VpcEncryptionControlEgressOnlyInternetGatewayExclusionInputEnable
    enable
    VpcEncryptionControlEgressOnlyInternetGatewayExclusionInputDisable
    disable
    Enable
    enable
    Disable
    disable
    Enable
    enable
    Disable
    disable
    ENABLE
    enable
    DISABLE
    disable
    "enable"
    enable
    "disable"
    disable

    VpcEncryptionControlElasticFileSystemExclusionInput, VpcEncryptionControlElasticFileSystemExclusionInputArgs

    Enable
    enable
    Disable
    disable
    VpcEncryptionControlElasticFileSystemExclusionInputEnable
    enable
    VpcEncryptionControlElasticFileSystemExclusionInputDisable
    disable
    Enable
    enable
    Disable
    disable
    Enable
    enable
    Disable
    disable
    ENABLE
    enable
    DISABLE
    disable
    "enable"
    enable
    "disable"
    disable

    VpcEncryptionControlExclusion, VpcEncryptionControlExclusionArgs

    State string
    The current state of the exclusion configuration.
    StateMessage string
    A message providing additional information about the exclusion state.
    State string
    The current state of the exclusion configuration.
    StateMessage string
    A message providing additional information about the exclusion state.
    state String
    The current state of the exclusion configuration.
    stateMessage String
    A message providing additional information about the exclusion state.
    state string
    The current state of the exclusion configuration.
    stateMessage string
    A message providing additional information about the exclusion state.
    state str
    The current state of the exclusion configuration.
    state_message str
    A message providing additional information about the exclusion state.
    state String
    The current state of the exclusion configuration.
    stateMessage String
    A message providing additional information about the exclusion state.

    VpcEncryptionControlInternetGatewayExclusionInput, VpcEncryptionControlInternetGatewayExclusionInputArgs

    Enable
    enable
    Disable
    disable
    VpcEncryptionControlInternetGatewayExclusionInputEnable
    enable
    VpcEncryptionControlInternetGatewayExclusionInputDisable
    disable
    Enable
    enable
    Disable
    disable
    Enable
    enable
    Disable
    disable
    ENABLE
    enable
    DISABLE
    disable
    "enable"
    enable
    "disable"
    disable

    VpcEncryptionControlLambdaExclusionInput, VpcEncryptionControlLambdaExclusionInputArgs

    Enable
    enable
    Disable
    disable
    VpcEncryptionControlLambdaExclusionInputEnable
    enable
    VpcEncryptionControlLambdaExclusionInputDisable
    disable
    Enable
    enable
    Disable
    disable
    Enable
    enable
    Disable
    disable
    ENABLE
    enable
    DISABLE
    disable
    "enable"
    enable
    "disable"
    disable

    VpcEncryptionControlMode, VpcEncryptionControlModeArgs

    Monitor
    monitor
    Enforce
    enforce
    VpcEncryptionControlModeMonitor
    monitor
    VpcEncryptionControlModeEnforce
    enforce
    Monitor
    monitor
    Enforce
    enforce
    Monitor
    monitor
    Enforce
    enforce
    MONITOR
    monitor
    ENFORCE
    enforce
    "monitor"
    monitor
    "enforce"
    enforce

    VpcEncryptionControlNatGatewayExclusionInput, VpcEncryptionControlNatGatewayExclusionInputArgs

    Enable
    enable
    Disable
    disable
    VpcEncryptionControlNatGatewayExclusionInputEnable
    enable
    VpcEncryptionControlNatGatewayExclusionInputDisable
    disable
    Enable
    enable
    Disable
    disable
    Enable
    enable
    Disable
    disable
    ENABLE
    enable
    DISABLE
    disable
    "enable"
    enable
    "disable"
    disable

    VpcEncryptionControlResourceExclusions, VpcEncryptionControlResourceExclusionsArgs

    EgressOnlyInternetGateway Pulumi.AwsNative.Ec2.Inputs.VpcEncryptionControlExclusion
    Specifies whether to exclude egress-only internet gateway traffic from encryption enforcement.
    ElasticFileSystem Pulumi.AwsNative.Ec2.Inputs.VpcEncryptionControlExclusion
    Specifies whether to exclude Elastic File System traffic from encryption enforcement.
    InternetGateway Pulumi.AwsNative.Ec2.Inputs.VpcEncryptionControlExclusion
    Specifies whether to exclude internet gateway traffic from encryption enforcement.
    Lambda Pulumi.AwsNative.Ec2.Inputs.VpcEncryptionControlExclusion
    Specifies whether to exclude Lambda function traffic from encryption enforcement.
    NatGateway Pulumi.AwsNative.Ec2.Inputs.VpcEncryptionControlExclusion
    Specifies whether to exclude NAT gateway traffic from encryption enforcement.
    VirtualPrivateGateway Pulumi.AwsNative.Ec2.Inputs.VpcEncryptionControlExclusion
    Specifies whether to exclude virtual private gateway traffic from encryption enforcement.
    VpcLattice Pulumi.AwsNative.Ec2.Inputs.VpcEncryptionControlExclusion
    Specifies whether to exclude VPC Lattice traffic from encryption enforcement.
    VpcPeering Pulumi.AwsNative.Ec2.Inputs.VpcEncryptionControlExclusion
    Specifies whether to exclude VPC peering connection traffic from encryption enforcement.
    EgressOnlyInternetGateway VpcEncryptionControlExclusion
    Specifies whether to exclude egress-only internet gateway traffic from encryption enforcement.
    ElasticFileSystem VpcEncryptionControlExclusion
    Specifies whether to exclude Elastic File System traffic from encryption enforcement.
    InternetGateway VpcEncryptionControlExclusion
    Specifies whether to exclude internet gateway traffic from encryption enforcement.
    Lambda VpcEncryptionControlExclusion
    Specifies whether to exclude Lambda function traffic from encryption enforcement.
    NatGateway VpcEncryptionControlExclusion
    Specifies whether to exclude NAT gateway traffic from encryption enforcement.
    VirtualPrivateGateway VpcEncryptionControlExclusion
    Specifies whether to exclude virtual private gateway traffic from encryption enforcement.
    VpcLattice VpcEncryptionControlExclusion
    Specifies whether to exclude VPC Lattice traffic from encryption enforcement.
    VpcPeering VpcEncryptionControlExclusion
    Specifies whether to exclude VPC peering connection traffic from encryption enforcement.
    egressOnlyInternetGateway VpcEncryptionControlExclusion
    Specifies whether to exclude egress-only internet gateway traffic from encryption enforcement.
    elasticFileSystem VpcEncryptionControlExclusion
    Specifies whether to exclude Elastic File System traffic from encryption enforcement.
    internetGateway VpcEncryptionControlExclusion
    Specifies whether to exclude internet gateway traffic from encryption enforcement.
    lambda VpcEncryptionControlExclusion
    Specifies whether to exclude Lambda function traffic from encryption enforcement.
    natGateway VpcEncryptionControlExclusion
    Specifies whether to exclude NAT gateway traffic from encryption enforcement.
    virtualPrivateGateway VpcEncryptionControlExclusion
    Specifies whether to exclude virtual private gateway traffic from encryption enforcement.
    vpcLattice VpcEncryptionControlExclusion
    Specifies whether to exclude VPC Lattice traffic from encryption enforcement.
    vpcPeering VpcEncryptionControlExclusion
    Specifies whether to exclude VPC peering connection traffic from encryption enforcement.
    egressOnlyInternetGateway VpcEncryptionControlExclusion
    Specifies whether to exclude egress-only internet gateway traffic from encryption enforcement.
    elasticFileSystem VpcEncryptionControlExclusion
    Specifies whether to exclude Elastic File System traffic from encryption enforcement.
    internetGateway VpcEncryptionControlExclusion
    Specifies whether to exclude internet gateway traffic from encryption enforcement.
    lambda VpcEncryptionControlExclusion
    Specifies whether to exclude Lambda function traffic from encryption enforcement.
    natGateway VpcEncryptionControlExclusion
    Specifies whether to exclude NAT gateway traffic from encryption enforcement.
    virtualPrivateGateway VpcEncryptionControlExclusion
    Specifies whether to exclude virtual private gateway traffic from encryption enforcement.
    vpcLattice VpcEncryptionControlExclusion
    Specifies whether to exclude VPC Lattice traffic from encryption enforcement.
    vpcPeering VpcEncryptionControlExclusion
    Specifies whether to exclude VPC peering connection traffic from encryption enforcement.
    egress_only_internet_gateway VpcEncryptionControlExclusion
    Specifies whether to exclude egress-only internet gateway traffic from encryption enforcement.
    elastic_file_system VpcEncryptionControlExclusion
    Specifies whether to exclude Elastic File System traffic from encryption enforcement.
    internet_gateway VpcEncryptionControlExclusion
    Specifies whether to exclude internet gateway traffic from encryption enforcement.
    lambda_ VpcEncryptionControlExclusion
    Specifies whether to exclude Lambda function traffic from encryption enforcement.
    nat_gateway VpcEncryptionControlExclusion
    Specifies whether to exclude NAT gateway traffic from encryption enforcement.
    virtual_private_gateway VpcEncryptionControlExclusion
    Specifies whether to exclude virtual private gateway traffic from encryption enforcement.
    vpc_lattice VpcEncryptionControlExclusion
    Specifies whether to exclude VPC Lattice traffic from encryption enforcement.
    vpc_peering VpcEncryptionControlExclusion
    Specifies whether to exclude VPC peering connection traffic from encryption enforcement.
    egressOnlyInternetGateway Property Map
    Specifies whether to exclude egress-only internet gateway traffic from encryption enforcement.
    elasticFileSystem Property Map
    Specifies whether to exclude Elastic File System traffic from encryption enforcement.
    internetGateway Property Map
    Specifies whether to exclude internet gateway traffic from encryption enforcement.
    lambda Property Map
    Specifies whether to exclude Lambda function traffic from encryption enforcement.
    natGateway Property Map
    Specifies whether to exclude NAT gateway traffic from encryption enforcement.
    virtualPrivateGateway Property Map
    Specifies whether to exclude virtual private gateway traffic from encryption enforcement.
    vpcLattice Property Map
    Specifies whether to exclude VPC Lattice traffic from encryption enforcement.
    vpcPeering Property Map
    Specifies whether to exclude VPC peering connection traffic from encryption enforcement.

    VpcEncryptionControlState, VpcEncryptionControlStateArgs

    Creating
    creating
    Available
    available
    MonitorInProgress
    monitor-in-progress
    EnforceInProgress
    enforce-in-progress
    MonitorFailed
    monitor-failed
    EnforceFailed
    enforce-failed
    Deleting
    deleting
    Deleted
    deleted
    DeleteFailed
    delete-failed
    VpcEncryptionControlStateCreating
    creating
    VpcEncryptionControlStateAvailable
    available
    VpcEncryptionControlStateMonitorInProgress
    monitor-in-progress
    VpcEncryptionControlStateEnforceInProgress
    enforce-in-progress
    VpcEncryptionControlStateMonitorFailed
    monitor-failed
    VpcEncryptionControlStateEnforceFailed
    enforce-failed
    VpcEncryptionControlStateDeleting
    deleting
    VpcEncryptionControlStateDeleted
    deleted
    VpcEncryptionControlStateDeleteFailed
    delete-failed
    Creating
    creating
    Available
    available
    MonitorInProgress
    monitor-in-progress
    EnforceInProgress
    enforce-in-progress
    MonitorFailed
    monitor-failed
    EnforceFailed
    enforce-failed
    Deleting
    deleting
    Deleted
    deleted
    DeleteFailed
    delete-failed
    Creating
    creating
    Available
    available
    MonitorInProgress
    monitor-in-progress
    EnforceInProgress
    enforce-in-progress
    MonitorFailed
    monitor-failed
    EnforceFailed
    enforce-failed
    Deleting
    deleting
    Deleted
    deleted
    DeleteFailed
    delete-failed
    CREATING
    creating
    AVAILABLE
    available
    MONITOR_IN_PROGRESS
    monitor-in-progress
    ENFORCE_IN_PROGRESS
    enforce-in-progress
    MONITOR_FAILED
    monitor-failed
    ENFORCE_FAILED
    enforce-failed
    DELETING
    deleting
    DELETED
    deleted
    DELETE_FAILED
    delete-failed
    "creating"
    creating
    "available"
    available
    "monitor-in-progress"
    monitor-in-progress
    "enforce-in-progress"
    enforce-in-progress
    "monitor-failed"
    monitor-failed
    "enforce-failed"
    enforce-failed
    "deleting"
    deleting
    "deleted"
    deleted
    "delete-failed"
    delete-failed

    VpcEncryptionControlVirtualPrivateGatewayExclusionInput, VpcEncryptionControlVirtualPrivateGatewayExclusionInputArgs

    Enable
    enable
    Disable
    disable
    VpcEncryptionControlVirtualPrivateGatewayExclusionInputEnable
    enable
    VpcEncryptionControlVirtualPrivateGatewayExclusionInputDisable
    disable
    Enable
    enable
    Disable
    disable
    Enable
    enable
    Disable
    disable
    ENABLE
    enable
    DISABLE
    disable
    "enable"
    enable
    "disable"
    disable

    VpcEncryptionControlVpcLatticeExclusionInput, VpcEncryptionControlVpcLatticeExclusionInputArgs

    Enable
    enable
    Disable
    disable
    VpcEncryptionControlVpcLatticeExclusionInputEnable
    enable
    VpcEncryptionControlVpcLatticeExclusionInputDisable
    disable
    Enable
    enable
    Disable
    disable
    Enable
    enable
    Disable
    disable
    ENABLE
    enable
    DISABLE
    disable
    "enable"
    enable
    "disable"
    disable

    VpcEncryptionControlVpcPeeringExclusionInput, VpcEncryptionControlVpcPeeringExclusionInputArgs

    Enable
    enable
    Disable
    disable
    VpcEncryptionControlVpcPeeringExclusionInputEnable
    enable
    VpcEncryptionControlVpcPeeringExclusionInputDisable
    disable
    Enable
    enable
    Disable
    disable
    Enable
    enable
    Disable
    disable
    ENABLE
    enable
    DISABLE
    disable
    "enable"
    enable
    "disable"
    disable

    Package Details

    Repository
    AWS Native pulumi/pulumi-aws-native
    License
    Apache-2.0
    aws-native logo

    We recommend new projects start with resources from the AWS provider.

    AWS Cloud Control v1.44.0 published on Friday, Dec 19, 2025 by Pulumi
    Schema (JSON)
    pulumi/pulumi-aws-native
      Meet Neo: Your AI Platform Teammate