published on Thursday, Sep 10, 2026 by Pulumi
published on Thursday, Sep 10, 2026 by Pulumi
Manages an Amazon Neptune Analytics Private Graph Endpoint.
Example Usage
Creates a private graph endpoint for Neptune Graph with VPC configuration, connecting through specified subnets and secured by a custom security group that allows inbound traffic on port 8182.
Basic Usage
import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";
const current = aws.getRegion({});
// Example VPC for Neptune Graph
const example = new aws.ec2.Vpc("example", {
cidrBlock: "10.0.0.0/16",
tags: {
Name: "neptune-graph-vpc",
},
});
// Example Subnet 1
const example1 = new aws.ec2.Subnet("example1", {
vpcId: example.id,
cidrBlock: "10.0.1.0/24",
availabilityZone: current.then(current => `${current.region}a`),
tags: {
Name: "neptune-graph-subnet-1",
},
});
// Example Subnet 2
const example2 = new aws.ec2.Subnet("example2", {
vpcId: example.id,
cidrBlock: "10.0.2.0/24",
availabilityZone: current.then(current => `${current.region}b`),
tags: {
Name: "neptune-graph-subnet-2",
},
});
// Security Group for Neptune Graph
const exampleSecurityGroup = new aws.ec2.SecurityGroup("example", {
ingress: [{
fromPort: 8182,
toPort: 8182,
protocol: "tcp",
cidrBlocks: ["10.0.0.0/16"],
}],
namePrefix: "neptune-graph-sg",
description: "Security group for Neptune Graph",
vpcId: example.id,
tags: {
Name: "neptune-graph-sg",
},
});
// Example Graph resource
const exampleGraph = new aws.neptunegraph.Graph("example", {
graphName: "example-graph-test-20260112",
provisionedMemory: 16,
});
// Private Graph Endpoint
const examplePrivateGraphEndpoint = new aws.neptunegraph.PrivateGraphEndpoint("example", {
graphIdentifier: exampleGraph.id,
vpcId: example.id,
subnetIds: [
example1.id,
example2.id,
],
vpcSecurityGroupIds: [exampleSecurityGroup.id],
});
import pulumi
import pulumi_aws as aws
current = aws.get_region()
# Example VPC for Neptune Graph
example = aws.ec2.Vpc("example",
cidr_block="10.0.0.0/16",
tags={
"Name": "neptune-graph-vpc",
})
# Example Subnet 1
example1 = aws.ec2.Subnet("example1",
vpc_id=example.id,
cidr_block="10.0.1.0/24",
availability_zone=f"{current.region}a",
tags={
"Name": "neptune-graph-subnet-1",
})
# Example Subnet 2
example2 = aws.ec2.Subnet("example2",
vpc_id=example.id,
cidr_block="10.0.2.0/24",
availability_zone=f"{current.region}b",
tags={
"Name": "neptune-graph-subnet-2",
})
# Security Group for Neptune Graph
example_security_group = aws.ec2.SecurityGroup("example",
ingress=[{
"from_port": 8182,
"to_port": 8182,
"protocol": "tcp",
"cidr_blocks": ["10.0.0.0/16"],
}],
name_prefix="neptune-graph-sg",
description="Security group for Neptune Graph",
vpc_id=example.id,
tags={
"Name": "neptune-graph-sg",
})
# Example Graph resource
example_graph = aws.neptunegraph.Graph("example",
graph_name="example-graph-test-20260112",
provisioned_memory=16)
# Private Graph Endpoint
example_private_graph_endpoint = aws.neptunegraph.PrivateGraphEndpoint("example",
graph_identifier=example_graph.id,
vpc_id=example.id,
subnet_ids=[
example1.id,
example2.id,
],
vpc_security_group_ids=[example_security_group.id])
package main
import (
"github.com/pulumi/pulumi-aws/sdk/v7/go/aws"
"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/ec2"
"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/neptunegraph"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
current, err := aws.GetRegion(ctx, &aws.GetRegionArgs{}, nil)
if err != nil {
return err
}
// Example VPC for Neptune Graph
example, err := ec2.NewVpc(ctx, "example", &ec2.VpcArgs{
CidrBlock: pulumi.String("10.0.0.0/16"),
Tags: pulumi.StringMap{
"Name": pulumi.String("neptune-graph-vpc"),
},
})
if err != nil {
return err
}
// Example Subnet 1
example1, err := ec2.NewSubnet(ctx, "example1", &ec2.SubnetArgs{
VpcId: example.ID().ToIDOutput().ToStringOutput(),
CidrBlock: pulumi.String("10.0.1.0/24"),
AvailabilityZone: pulumi.Sprintf("%va", current.Region),
Tags: pulumi.StringMap{
"Name": pulumi.String("neptune-graph-subnet-1"),
},
})
if err != nil {
return err
}
// Example Subnet 2
example2, err := ec2.NewSubnet(ctx, "example2", &ec2.SubnetArgs{
VpcId: example.ID().ToIDOutput().ToStringOutput(),
CidrBlock: pulumi.String("10.0.2.0/24"),
AvailabilityZone: pulumi.Sprintf("%vb", current.Region),
Tags: pulumi.StringMap{
"Name": pulumi.String("neptune-graph-subnet-2"),
},
})
if err != nil {
return err
}
// Security Group for Neptune Graph
exampleSecurityGroup, err := ec2.NewSecurityGroup(ctx, "example", &ec2.SecurityGroupArgs{
Ingress: ec2.SecurityGroupIngressArray{
&ec2.SecurityGroupIngressArgs{
FromPort: pulumi.Int(8182),
ToPort: pulumi.Int(8182),
Protocol: pulumi.String("tcp"),
CidrBlocks: pulumi.StringArray{
pulumi.String("10.0.0.0/16"),
},
},
},
NamePrefix: pulumi.String("neptune-graph-sg"),
Description: pulumi.String("Security group for Neptune Graph"),
VpcId: example.ID().ToIDOutput().ToStringOutput(),
Tags: pulumi.StringMap{
"Name": pulumi.String("neptune-graph-sg"),
},
})
if err != nil {
return err
}
// Example Graph resource
exampleGraph, err := neptunegraph.NewGraph(ctx, "example", &neptunegraph.GraphArgs{
GraphName: pulumi.String("example-graph-test-20260112"),
ProvisionedMemory: pulumi.Int(16),
})
if err != nil {
return err
}
// Private Graph Endpoint
_, err = neptunegraph.NewPrivateGraphEndpoint(ctx, "example", &neptunegraph.PrivateGraphEndpointArgs{
GraphIdentifier: exampleGraph.ID().ToIDOutput().ToStringOutput(),
VpcId: example.ID().ToIDOutput().ToStringOutput(),
SubnetIds: pulumi.StringArray{
example1.ID().ToIDOutput().ToStringOutput(),
example2.ID().ToIDOutput().ToStringOutput(),
},
VpcSecurityGroupIds: pulumi.StringArray{
exampleSecurityGroup.ID().ToIDOutput().ToStringOutput(),
},
})
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;
return await Deployment.RunAsync(() =>
{
var current = Aws.GetRegion.Invoke();
// Example VPC for Neptune Graph
var example = new Aws.Ec2.Vpc("example", new()
{
CidrBlock = "10.0.0.0/16",
Tags =
{
{ "Name", "neptune-graph-vpc" },
},
});
// Example Subnet 1
var example1 = new Aws.Ec2.Subnet("example1", new()
{
VpcId = example.Id,
CidrBlock = "10.0.1.0/24",
AvailabilityZone = $"{current.Apply(getRegionResult => getRegionResult.Region)}a",
Tags =
{
{ "Name", "neptune-graph-subnet-1" },
},
});
// Example Subnet 2
var example2 = new Aws.Ec2.Subnet("example2", new()
{
VpcId = example.Id,
CidrBlock = "10.0.2.0/24",
AvailabilityZone = $"{current.Apply(getRegionResult => getRegionResult.Region)}b",
Tags =
{
{ "Name", "neptune-graph-subnet-2" },
},
});
// Security Group for Neptune Graph
var exampleSecurityGroup = new Aws.Ec2.SecurityGroup("example", new()
{
Ingress = new[]
{
new Aws.Ec2.Inputs.SecurityGroupIngressArgs
{
FromPort = 8182,
ToPort = 8182,
Protocol = "tcp",
CidrBlocks = new[]
{
"10.0.0.0/16",
},
},
},
NamePrefix = "neptune-graph-sg",
Description = "Security group for Neptune Graph",
VpcId = example.Id,
Tags =
{
{ "Name", "neptune-graph-sg" },
},
});
// Example Graph resource
var exampleGraph = new Aws.NeptuneGraph.Graph("example", new()
{
GraphName = "example-graph-test-20260112",
ProvisionedMemory = 16,
});
// Private Graph Endpoint
var examplePrivateGraphEndpoint = new Aws.NeptuneGraph.PrivateGraphEndpoint("example", new()
{
GraphIdentifier = exampleGraph.Id,
VpcId = example.Id,
SubnetIds = new[]
{
example1.Id,
example2.Id,
},
VpcSecurityGroupIds = new[]
{
exampleSecurityGroup.Id,
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.AwsFunctions;
import com.pulumi.aws.inputs.GetRegionArgs;
import com.pulumi.aws.ec2.Vpc;
import com.pulumi.aws.ec2.VpcArgs;
import com.pulumi.aws.ec2.Subnet;
import com.pulumi.aws.ec2.SubnetArgs;
import com.pulumi.aws.ec2.SecurityGroup;
import com.pulumi.aws.ec2.SecurityGroupArgs;
import com.pulumi.aws.ec2.inputs.SecurityGroupIngressArgs;
import com.pulumi.aws.neptunegraph.Graph;
import com.pulumi.aws.neptunegraph.GraphArgs;
import com.pulumi.aws.neptunegraph.PrivateGraphEndpoint;
import com.pulumi.aws.neptunegraph.PrivateGraphEndpointArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
final var current = AwsFunctions.getRegion(GetRegionArgs.builder()
.build());
// Example VPC for Neptune Graph
var example = new Vpc("example", VpcArgs.builder()
.cidrBlock("10.0.0.0/16")
.tags(Map.of("Name", "neptune-graph-vpc"))
.build());
// Example Subnet 1
var example1 = new Subnet("example1", SubnetArgs.builder()
.vpcId(example.id())
.cidrBlock("10.0.1.0/24")
.availabilityZone(String.format("%sa", current.region()))
.tags(Map.of("Name", "neptune-graph-subnet-1"))
.build());
// Example Subnet 2
var example2 = new Subnet("example2", SubnetArgs.builder()
.vpcId(example.id())
.cidrBlock("10.0.2.0/24")
.availabilityZone(String.format("%sb", current.region()))
.tags(Map.of("Name", "neptune-graph-subnet-2"))
.build());
// Security Group for Neptune Graph
var exampleSecurityGroup = new SecurityGroup("exampleSecurityGroup", SecurityGroupArgs.builder()
.ingress(SecurityGroupIngressArgs.builder()
.fromPort(8182)
.toPort(8182)
.protocol("tcp")
.cidrBlocks("10.0.0.0/16")
.build())
.namePrefix("neptune-graph-sg")
.description("Security group for Neptune Graph")
.vpcId(example.id())
.tags(Map.of("Name", "neptune-graph-sg"))
.build());
// Example Graph resource
var exampleGraph = new Graph("exampleGraph", GraphArgs.builder()
.graphName("example-graph-test-20260112")
.provisionedMemory(16)
.build());
// Private Graph Endpoint
var examplePrivateGraphEndpoint = new PrivateGraphEndpoint("examplePrivateGraphEndpoint", PrivateGraphEndpointArgs.builder()
.graphIdentifier(exampleGraph.id())
.vpcId(example.id())
.subnetIds(
example1.id(),
example2.id())
.vpcSecurityGroupIds(exampleSecurityGroup.id())
.build());
}
}
resources:
# Example VPC for Neptune Graph
example:
type: aws:ec2:Vpc
properties:
cidrBlock: 10.0.0.0/16
tags:
Name: neptune-graph-vpc
# Example Subnet 1
example1:
type: aws:ec2:Subnet
properties:
vpcId: ${example.id}
cidrBlock: 10.0.1.0/24
availabilityZone: ${current.region}a
tags:
Name: neptune-graph-subnet-1
# Example Subnet 2
example2:
type: aws:ec2:Subnet
properties:
vpcId: ${example.id}
cidrBlock: 10.0.2.0/24
availabilityZone: ${current.region}b
tags:
Name: neptune-graph-subnet-2
# Security Group for Neptune Graph
exampleSecurityGroup:
type: aws:ec2:SecurityGroup
name: example
properties:
ingress:
- fromPort: 8182
toPort: 8182
protocol: tcp
cidrBlocks:
- 10.0.0.0/16
namePrefix: neptune-graph-sg
description: Security group for Neptune Graph
vpcId: ${example.id}
tags:
Name: neptune-graph-sg
# Example Graph resource
exampleGraph:
type: aws:neptunegraph:Graph
name: example
properties:
graphName: example-graph-test-20260112
provisionedMemory: 16
# Private Graph Endpoint
examplePrivateGraphEndpoint:
type: aws:neptunegraph:PrivateGraphEndpoint
name: example
properties:
graphIdentifier: ${exampleGraph.id}
vpcId: ${example.id}
subnetIds:
- ${example1.id}
- ${example2.id}
vpcSecurityGroupIds:
- ${exampleSecurityGroup.id}
variables:
current:
fn::invoke:
function: aws:getRegion
arguments: {}
pulumi {
required_providers {
aws = {
source = "pulumi/aws"
}
}
}
data "aws_getregion" "current" {
}
# Example VPC for Neptune Graph
resource "aws_ec2_vpc" "example" {
cidr_block = "10.0.0.0/16"
tags = {
"Name" = "neptune-graph-vpc"
}
}
# Example Subnet 1
resource "aws_ec2_subnet" "example1" {
vpc_id = aws_ec2_vpc.example.id
cidr_block = "10.0.1.0/24"
availability_zone ="${data.aws_getregion.current.region}a"
tags = {
"Name" = "neptune-graph-subnet-1"
}
}
# Example Subnet 2
resource "aws_ec2_subnet" "example2" {
vpc_id = aws_ec2_vpc.example.id
cidr_block = "10.0.2.0/24"
availability_zone ="${data.aws_getregion.current.region}b"
tags = {
"Name" = "neptune-graph-subnet-2"
}
}
# Security Group for Neptune Graph
resource "aws_ec2_securitygroup" "example" {
ingress {
from_port = 8182
to_port = 8182
protocol = "tcp"
cidr_blocks = ["10.0.0.0/16"]
}
name_prefix = "neptune-graph-sg"
description = "Security group for Neptune Graph"
vpc_id = aws_ec2_vpc.example.id
tags = {
"Name" = "neptune-graph-sg"
}
}
# Example Graph resource
resource "aws_neptunegraph_graph" "example" {
graph_name = "example-graph-test-20260112"
provisioned_memory = 16
}
# Private Graph Endpoint
resource "aws_neptunegraph_privategraphendpoint" "example" {
graph_identifier = aws_neptunegraph_graph.example.id
vpc_id = aws_ec2_vpc.example.id
subnet_ids = [aws_ec2_subnet.example1.id, aws_ec2_subnet.example2.id]
vpc_security_group_ids = [aws_ec2_securitygroup.example.id]
}
Create PrivateGraphEndpoint Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new PrivateGraphEndpoint(name: string, args: PrivateGraphEndpointArgs, opts?: CustomResourceOptions);@overload
def PrivateGraphEndpoint(resource_name: str,
args: PrivateGraphEndpointArgs,
opts: Optional[ResourceOptions] = None)
@overload
def PrivateGraphEndpoint(resource_name: str,
opts: Optional[ResourceOptions] = None,
graph_identifier: Optional[str] = None,
vpc_id: Optional[str] = None,
region: Optional[str] = None,
subnet_ids: Optional[Sequence[str]] = None,
timeouts: Optional[PrivateGraphEndpointTimeoutsArgs] = None,
vpc_security_group_ids: Optional[Sequence[str]] = None)func NewPrivateGraphEndpoint(ctx *Context, name string, args PrivateGraphEndpointArgs, opts ...ResourceOption) (*PrivateGraphEndpoint, error)public PrivateGraphEndpoint(string name, PrivateGraphEndpointArgs args, CustomResourceOptions? opts = null)
public PrivateGraphEndpoint(String name, PrivateGraphEndpointArgs args)
public PrivateGraphEndpoint(String name, PrivateGraphEndpointArgs args, CustomResourceOptions options)
type: aws:neptunegraph:PrivateGraphEndpoint
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "aws_neptunegraph_private_graph_endpoint" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args PrivateGraphEndpointArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args PrivateGraphEndpointArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args PrivateGraphEndpointArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args PrivateGraphEndpointArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args PrivateGraphEndpointArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var privateGraphEndpointResource = new Aws.NeptuneGraph.PrivateGraphEndpoint("privateGraphEndpointResource", new()
{
GraphIdentifier = "string",
VpcId = "string",
Region = "string",
SubnetIds = new[]
{
"string",
},
Timeouts = new Aws.NeptuneGraph.Inputs.PrivateGraphEndpointTimeoutsArgs
{
Create = "string",
Delete = "string",
},
VpcSecurityGroupIds = new[]
{
"string",
},
});
example, err := neptunegraph.NewPrivateGraphEndpoint(ctx, "privateGraphEndpointResource", &neptunegraph.PrivateGraphEndpointArgs{
GraphIdentifier: pulumi.String("string"),
VpcId: pulumi.String("string"),
Region: pulumi.String("string"),
SubnetIds: pulumi.StringArray{
pulumi.String("string"),
},
Timeouts: &neptunegraph.PrivateGraphEndpointTimeoutsArgs{
Create: pulumi.String("string"),
Delete: pulumi.String("string"),
},
VpcSecurityGroupIds: pulumi.StringArray{
pulumi.String("string"),
},
})
resource "aws_neptunegraph_private_graph_endpoint" "privateGraphEndpointResource" {
lifecycle {
create_before_destroy = true
}
graph_identifier = "string"
vpc_id = "string"
region = "string"
subnet_ids = ["string"]
timeouts = {
create = "string"
delete = "string"
}
vpc_security_group_ids = ["string"]
}
var privateGraphEndpointResource = new PrivateGraphEndpoint("privateGraphEndpointResource", PrivateGraphEndpointArgs.builder()
.graphIdentifier("string")
.vpcId("string")
.region("string")
.subnetIds("string")
.timeouts(PrivateGraphEndpointTimeoutsArgs.builder()
.create("string")
.delete("string")
.build())
.vpcSecurityGroupIds("string")
.build());
private_graph_endpoint_resource = aws.neptunegraph.PrivateGraphEndpoint("privateGraphEndpointResource",
graph_identifier="string",
vpc_id="string",
region="string",
subnet_ids=["string"],
timeouts={
"create": "string",
"delete": "string",
},
vpc_security_group_ids=["string"])
const privateGraphEndpointResource = new aws.neptunegraph.PrivateGraphEndpoint("privateGraphEndpointResource", {
graphIdentifier: "string",
vpcId: "string",
region: "string",
subnetIds: ["string"],
timeouts: {
create: "string",
"delete": "string",
},
vpcSecurityGroupIds: ["string"],
});
type: aws:neptunegraph:PrivateGraphEndpoint
properties:
graphIdentifier: string
region: string
subnetIds:
- string
timeouts:
create: string
delete: string
vpcId: string
vpcSecurityGroupIds:
- string
PrivateGraphEndpoint Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The PrivateGraphEndpoint resource accepts the following input properties:
- Graph
Identifier string - Unique identifier of the Neptune Analytics graph.
- Vpc
Id string VPC in which the private graph endpoint needs to be created.
The following arguments are optional:
- Region string
- Region where this resource will be managed. Defaults to the Region set in the provider configuration.
- Subnet
Ids List<string> - Subnets in which private graph endpoint ENIs are created.
- Timeouts
Private
Graph Endpoint Timeouts - Vpc
Security List<string>Group Ids - Security groups to be attached to the private graph endpoint. The Neptune Analytics API does not return this value, so Terraform cannot detect drift or repopulate it on import; the value present at creation persists in state until changed in configuration.
- Graph
Identifier string - Unique identifier of the Neptune Analytics graph.
- Vpc
Id string VPC in which the private graph endpoint needs to be created.
The following arguments are optional:
- Region string
- Region where this resource will be managed. Defaults to the Region set in the provider configuration.
- Subnet
Ids []string - Subnets in which private graph endpoint ENIs are created.
- Timeouts
Private
Graph Endpoint Timeouts Args - Vpc
Security []stringGroup Ids - Security groups to be attached to the private graph endpoint. The Neptune Analytics API does not return this value, so Terraform cannot detect drift or repopulate it on import; the value present at creation persists in state until changed in configuration.
- graph_
identifier string - Unique identifier of the Neptune Analytics graph.
- vpc_
id string VPC in which the private graph endpoint needs to be created.
The following arguments are optional:
- region string
- Region where this resource will be managed. Defaults to the Region set in the provider configuration.
- subnet_
ids list(string) - Subnets in which private graph endpoint ENIs are created.
- timeouts object
- vpc_
security_ list(string)group_ ids - Security groups to be attached to the private graph endpoint. The Neptune Analytics API does not return this value, so Terraform cannot detect drift or repopulate it on import; the value present at creation persists in state until changed in configuration.
- graph
Identifier String - Unique identifier of the Neptune Analytics graph.
- vpc
Id String VPC in which the private graph endpoint needs to be created.
The following arguments are optional:
- region String
- Region where this resource will be managed. Defaults to the Region set in the provider configuration.
- subnet
Ids List<String> - Subnets in which private graph endpoint ENIs are created.
- timeouts
Private
Graph Endpoint Timeouts - vpc
Security List<String>Group Ids - Security groups to be attached to the private graph endpoint. The Neptune Analytics API does not return this value, so Terraform cannot detect drift or repopulate it on import; the value present at creation persists in state until changed in configuration.
- graph
Identifier string - Unique identifier of the Neptune Analytics graph.
- vpc
Id string VPC in which the private graph endpoint needs to be created.
The following arguments are optional:
- region string
- Region where this resource will be managed. Defaults to the Region set in the provider configuration.
- subnet
Ids string[] - Subnets in which private graph endpoint ENIs are created.
- timeouts
Private
Graph Endpoint Timeouts - vpc
Security string[]Group Ids - Security groups to be attached to the private graph endpoint. The Neptune Analytics API does not return this value, so Terraform cannot detect drift or repopulate it on import; the value present at creation persists in state until changed in configuration.
- graph_
identifier str - Unique identifier of the Neptune Analytics graph.
- vpc_
id str VPC in which the private graph endpoint needs to be created.
The following arguments are optional:
- region str
- Region where this resource will be managed. Defaults to the Region set in the provider configuration.
- subnet_
ids Sequence[str] - Subnets in which private graph endpoint ENIs are created.
- timeouts
Private
Graph Endpoint Timeouts Args - vpc_
security_ Sequence[str]group_ ids - Security groups to be attached to the private graph endpoint. The Neptune Analytics API does not return this value, so Terraform cannot detect drift or repopulate it on import; the value present at creation persists in state until changed in configuration.
- graph
Identifier String - Unique identifier of the Neptune Analytics graph.
- vpc
Id String VPC in which the private graph endpoint needs to be created.
The following arguments are optional:
- region String
- Region where this resource will be managed. Defaults to the Region set in the provider configuration.
- subnet
Ids List<String> - Subnets in which private graph endpoint ENIs are created.
- timeouts Property Map
- vpc
Security List<String>Group Ids - Security groups to be attached to the private graph endpoint. The Neptune Analytics API does not return this value, so Terraform cannot detect drift or repopulate it on import; the value present at creation persists in state until changed in configuration.
Outputs
All input properties are implicitly available as output properties. Additionally, the PrivateGraphEndpoint resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Private
Graph stringEndpoint Identifier - PrivateGraphEndpoint resource identifier generated by concatenating the associated
graphIdentifierandvpcIdwith an underscore separator. For example, ifgraphIdentifierisg-12a3bcdef4andvpcIdisvpc-111122223333aabbc, the generated identifier isg-12a3bcdef4_vpc-111122223333aabbc. - Vpc
Endpoint stringId - VPC endpoint that provides a private connection between the Graph and specified VPC.
- Id string
- The provider-assigned unique ID for this managed resource.
- Private
Graph stringEndpoint Identifier - PrivateGraphEndpoint resource identifier generated by concatenating the associated
graphIdentifierandvpcIdwith an underscore separator. For example, ifgraphIdentifierisg-12a3bcdef4andvpcIdisvpc-111122223333aabbc, the generated identifier isg-12a3bcdef4_vpc-111122223333aabbc. - Vpc
Endpoint stringId - VPC endpoint that provides a private connection between the Graph and specified VPC.
- id string
- The provider-assigned unique ID for this managed resource.
- private_
graph_ stringendpoint_ identifier - PrivateGraphEndpoint resource identifier generated by concatenating the associated
graphIdentifierandvpcIdwith an underscore separator. For example, ifgraphIdentifierisg-12a3bcdef4andvpcIdisvpc-111122223333aabbc, the generated identifier isg-12a3bcdef4_vpc-111122223333aabbc. - vpc_
endpoint_ stringid - VPC endpoint that provides a private connection between the Graph and specified VPC.
- id String
- The provider-assigned unique ID for this managed resource.
- private
Graph StringEndpoint Identifier - PrivateGraphEndpoint resource identifier generated by concatenating the associated
graphIdentifierandvpcIdwith an underscore separator. For example, ifgraphIdentifierisg-12a3bcdef4andvpcIdisvpc-111122223333aabbc, the generated identifier isg-12a3bcdef4_vpc-111122223333aabbc. - vpc
Endpoint StringId - VPC endpoint that provides a private connection between the Graph and specified VPC.
- id string
- The provider-assigned unique ID for this managed resource.
- private
Graph stringEndpoint Identifier - PrivateGraphEndpoint resource identifier generated by concatenating the associated
graphIdentifierandvpcIdwith an underscore separator. For example, ifgraphIdentifierisg-12a3bcdef4andvpcIdisvpc-111122223333aabbc, the generated identifier isg-12a3bcdef4_vpc-111122223333aabbc. - vpc
Endpoint stringId - VPC endpoint that provides a private connection between the Graph and specified VPC.
- id str
- The provider-assigned unique ID for this managed resource.
- private_
graph_ strendpoint_ identifier - PrivateGraphEndpoint resource identifier generated by concatenating the associated
graphIdentifierandvpcIdwith an underscore separator. For example, ifgraphIdentifierisg-12a3bcdef4andvpcIdisvpc-111122223333aabbc, the generated identifier isg-12a3bcdef4_vpc-111122223333aabbc. - vpc_
endpoint_ strid - VPC endpoint that provides a private connection between the Graph and specified VPC.
- id String
- The provider-assigned unique ID for this managed resource.
- private
Graph StringEndpoint Identifier - PrivateGraphEndpoint resource identifier generated by concatenating the associated
graphIdentifierandvpcIdwith an underscore separator. For example, ifgraphIdentifierisg-12a3bcdef4andvpcIdisvpc-111122223333aabbc, the generated identifier isg-12a3bcdef4_vpc-111122223333aabbc. - vpc
Endpoint StringId - VPC endpoint that provides a private connection between the Graph and specified VPC.
Look up Existing PrivateGraphEndpoint Resource
Get an existing PrivateGraphEndpoint resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: PrivateGraphEndpointState, opts?: CustomResourceOptions): PrivateGraphEndpoint@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
graph_identifier: Optional[str] = None,
private_graph_endpoint_identifier: Optional[str] = None,
region: Optional[str] = None,
subnet_ids: Optional[Sequence[str]] = None,
timeouts: Optional[PrivateGraphEndpointTimeoutsArgs] = None,
vpc_endpoint_id: Optional[str] = None,
vpc_id: Optional[str] = None,
vpc_security_group_ids: Optional[Sequence[str]] = None) -> PrivateGraphEndpointfunc GetPrivateGraphEndpoint(ctx *Context, name string, id IDInput, state *PrivateGraphEndpointState, opts ...ResourceOption) (*PrivateGraphEndpoint, error)public static PrivateGraphEndpoint Get(string name, Input<string> id, PrivateGraphEndpointState? state, CustomResourceOptions? opts = null)public static PrivateGraphEndpoint get(String name, Output<String> id, PrivateGraphEndpointState state, CustomResourceOptions options)resources: _: type: aws:neptunegraph:PrivateGraphEndpoint get: id: ${id}import {
to = aws_neptunegraph_private_graph_endpoint.example
id = "${id}"
}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Graph
Identifier string - Unique identifier of the Neptune Analytics graph.
- Private
Graph stringEndpoint Identifier - PrivateGraphEndpoint resource identifier generated by concatenating the associated
graphIdentifierandvpcIdwith an underscore separator. For example, ifgraphIdentifierisg-12a3bcdef4andvpcIdisvpc-111122223333aabbc, the generated identifier isg-12a3bcdef4_vpc-111122223333aabbc. - Region string
- Region where this resource will be managed. Defaults to the Region set in the provider configuration.
- Subnet
Ids List<string> - Subnets in which private graph endpoint ENIs are created.
- Timeouts
Private
Graph Endpoint Timeouts - Vpc
Endpoint stringId - VPC endpoint that provides a private connection between the Graph and specified VPC.
- Vpc
Id string VPC in which the private graph endpoint needs to be created.
The following arguments are optional:
- Vpc
Security List<string>Group Ids - Security groups to be attached to the private graph endpoint. The Neptune Analytics API does not return this value, so Terraform cannot detect drift or repopulate it on import; the value present at creation persists in state until changed in configuration.
- Graph
Identifier string - Unique identifier of the Neptune Analytics graph.
- Private
Graph stringEndpoint Identifier - PrivateGraphEndpoint resource identifier generated by concatenating the associated
graphIdentifierandvpcIdwith an underscore separator. For example, ifgraphIdentifierisg-12a3bcdef4andvpcIdisvpc-111122223333aabbc, the generated identifier isg-12a3bcdef4_vpc-111122223333aabbc. - Region string
- Region where this resource will be managed. Defaults to the Region set in the provider configuration.
- Subnet
Ids []string - Subnets in which private graph endpoint ENIs are created.
- Timeouts
Private
Graph Endpoint Timeouts Args - Vpc
Endpoint stringId - VPC endpoint that provides a private connection between the Graph and specified VPC.
- Vpc
Id string VPC in which the private graph endpoint needs to be created.
The following arguments are optional:
- Vpc
Security []stringGroup Ids - Security groups to be attached to the private graph endpoint. The Neptune Analytics API does not return this value, so Terraform cannot detect drift or repopulate it on import; the value present at creation persists in state until changed in configuration.
- graph_
identifier string - Unique identifier of the Neptune Analytics graph.
- private_
graph_ stringendpoint_ identifier - PrivateGraphEndpoint resource identifier generated by concatenating the associated
graphIdentifierandvpcIdwith an underscore separator. For example, ifgraphIdentifierisg-12a3bcdef4andvpcIdisvpc-111122223333aabbc, the generated identifier isg-12a3bcdef4_vpc-111122223333aabbc. - region string
- Region where this resource will be managed. Defaults to the Region set in the provider configuration.
- subnet_
ids list(string) - Subnets in which private graph endpoint ENIs are created.
- timeouts object
- vpc_
endpoint_ stringid - VPC endpoint that provides a private connection between the Graph and specified VPC.
- vpc_
id string VPC in which the private graph endpoint needs to be created.
The following arguments are optional:
- vpc_
security_ list(string)group_ ids - Security groups to be attached to the private graph endpoint. The Neptune Analytics API does not return this value, so Terraform cannot detect drift or repopulate it on import; the value present at creation persists in state until changed in configuration.
- graph
Identifier String - Unique identifier of the Neptune Analytics graph.
- private
Graph StringEndpoint Identifier - PrivateGraphEndpoint resource identifier generated by concatenating the associated
graphIdentifierandvpcIdwith an underscore separator. For example, ifgraphIdentifierisg-12a3bcdef4andvpcIdisvpc-111122223333aabbc, the generated identifier isg-12a3bcdef4_vpc-111122223333aabbc. - region String
- Region where this resource will be managed. Defaults to the Region set in the provider configuration.
- subnet
Ids List<String> - Subnets in which private graph endpoint ENIs are created.
- timeouts
Private
Graph Endpoint Timeouts - vpc
Endpoint StringId - VPC endpoint that provides a private connection between the Graph and specified VPC.
- vpc
Id String VPC in which the private graph endpoint needs to be created.
The following arguments are optional:
- vpc
Security List<String>Group Ids - Security groups to be attached to the private graph endpoint. The Neptune Analytics API does not return this value, so Terraform cannot detect drift or repopulate it on import; the value present at creation persists in state until changed in configuration.
- graph
Identifier string - Unique identifier of the Neptune Analytics graph.
- private
Graph stringEndpoint Identifier - PrivateGraphEndpoint resource identifier generated by concatenating the associated
graphIdentifierandvpcIdwith an underscore separator. For example, ifgraphIdentifierisg-12a3bcdef4andvpcIdisvpc-111122223333aabbc, the generated identifier isg-12a3bcdef4_vpc-111122223333aabbc. - region string
- Region where this resource will be managed. Defaults to the Region set in the provider configuration.
- subnet
Ids string[] - Subnets in which private graph endpoint ENIs are created.
- timeouts
Private
Graph Endpoint Timeouts - vpc
Endpoint stringId - VPC endpoint that provides a private connection between the Graph and specified VPC.
- vpc
Id string VPC in which the private graph endpoint needs to be created.
The following arguments are optional:
- vpc
Security string[]Group Ids - Security groups to be attached to the private graph endpoint. The Neptune Analytics API does not return this value, so Terraform cannot detect drift or repopulate it on import; the value present at creation persists in state until changed in configuration.
- graph_
identifier str - Unique identifier of the Neptune Analytics graph.
- private_
graph_ strendpoint_ identifier - PrivateGraphEndpoint resource identifier generated by concatenating the associated
graphIdentifierandvpcIdwith an underscore separator. For example, ifgraphIdentifierisg-12a3bcdef4andvpcIdisvpc-111122223333aabbc, the generated identifier isg-12a3bcdef4_vpc-111122223333aabbc. - region str
- Region where this resource will be managed. Defaults to the Region set in the provider configuration.
- subnet_
ids Sequence[str] - Subnets in which private graph endpoint ENIs are created.
- timeouts
Private
Graph Endpoint Timeouts Args - vpc_
endpoint_ strid - VPC endpoint that provides a private connection between the Graph and specified VPC.
- vpc_
id str VPC in which the private graph endpoint needs to be created.
The following arguments are optional:
- vpc_
security_ Sequence[str]group_ ids - Security groups to be attached to the private graph endpoint. The Neptune Analytics API does not return this value, so Terraform cannot detect drift or repopulate it on import; the value present at creation persists in state until changed in configuration.
- graph
Identifier String - Unique identifier of the Neptune Analytics graph.
- private
Graph StringEndpoint Identifier - PrivateGraphEndpoint resource identifier generated by concatenating the associated
graphIdentifierandvpcIdwith an underscore separator. For example, ifgraphIdentifierisg-12a3bcdef4andvpcIdisvpc-111122223333aabbc, the generated identifier isg-12a3bcdef4_vpc-111122223333aabbc. - region String
- Region where this resource will be managed. Defaults to the Region set in the provider configuration.
- subnet
Ids List<String> - Subnets in which private graph endpoint ENIs are created.
- timeouts Property Map
- vpc
Endpoint StringId - VPC endpoint that provides a private connection between the Graph and specified VPC.
- vpc
Id String VPC in which the private graph endpoint needs to be created.
The following arguments are optional:
- vpc
Security List<String>Group Ids - Security groups to be attached to the private graph endpoint. The Neptune Analytics API does not return this value, so Terraform cannot detect drift or repopulate it on import; the value present at creation persists in state until changed in configuration.
Supporting Types
PrivateGraphEndpointTimeouts, PrivateGraphEndpointTimeoutsArgs
- Create string
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
- Delete string
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
- Create string
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
- Delete string
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
- create string
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
- delete string
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
- create String
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
- delete String
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
- create string
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
- delete string
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
- create str
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
- delete str
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
- create String
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
- delete String
- A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
Import
Identity Schema
Required
graphIdentifier(String) Unique identifier of the Neptune Analytics graph.vpcId(String) VPC in which the private graph endpoint is created.
Optional
accountId(String) AWS Account where this resource is managed.region(String) Region where this resource is managed.
Using pulumi import, import Neptune Analytics Private Graph Endpoint using the privateGraphEndpointIdentifier. For example:
$ pulumi import aws:neptunegraph/privateGraphEndpoint:PrivateGraphEndpoint example g-12a3bcdef4_vpc-111122223333aabbc
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- AWS Classic pulumi/pulumi-aws
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
awsTerraform Provider.
published on Thursday, Sep 10, 2026 by Pulumi