AWS::EC2::VPCEncryptionControl ResourceExclusions

Information about resource exclusions for the VPC Encryption Control configuration.

Syntax

To declare this entity in your CloudFormation template, use the following syntax:

JSON

{
  "EgressOnlyInternetGateway" : VpcEncryptionControlExclusion,
  "ElasticFileSystem" : VpcEncryptionControlExclusion,
  "InternetGateway" : VpcEncryptionControlExclusion,
  "Lambda" : VpcEncryptionControlExclusion,
  "NatGateway" : VpcEncryptionControlExclusion,
  "VirtualPrivateGateway" : VpcEncryptionControlExclusion,
  "VpcLattice" : VpcEncryptionControlExclusion,
  "VpcPeering" : VpcEncryptionControlExclusion
}

YAML

  EgressOnlyInternetGateway: 
    VpcEncryptionControlExclusion
  ElasticFileSystem: 
    VpcEncryptionControlExclusion
  InternetGateway: 
    VpcEncryptionControlExclusion
  Lambda: 
    VpcEncryptionControlExclusion
  NatGateway: 
    VpcEncryptionControlExclusion
  VirtualPrivateGateway: 
    VpcEncryptionControlExclusion
  VpcLattice: 
    VpcEncryptionControlExclusion
  VpcPeering: 
    VpcEncryptionControlExclusion

Properties

EgressOnlyInternetGateway

Specifies whether to exclude egress-only internet gateway traffic from encryption enforcement.

Required: No

Type: VpcEncryptionControlExclusion

Allowed values: enable | disable

Update requires: No interruption

ElasticFileSystem

Specifies whether to exclude Elastic File System traffic from encryption enforcement.

Required: No

Type: VpcEncryptionControlExclusion

Allowed values: enable | disable

Update requires: No interruption

InternetGateway

Specifies whether to exclude internet gateway traffic from encryption enforcement.

Required: No

Type: VpcEncryptionControlExclusion

Allowed values: enable | disable

Update requires: No interruption

Lambda

Specifies whether to exclude Lambda function traffic from encryption enforcement.

Required: No

Type: VpcEncryptionControlExclusion

Allowed values: enable | disable

Update requires: No interruption

NatGateway

Specifies whether to exclude NAT gateway traffic from encryption enforcement.

Required: No

Type: VpcEncryptionControlExclusion

Allowed values: enable | disable

Update requires: No interruption

VirtualPrivateGateway

Specifies whether to exclude virtual private gateway traffic from encryption enforcement.

Required: No

Type: VpcEncryptionControlExclusion

Allowed values: enable | disable

Update requires: No interruption

VpcLattice

Specifies whether to exclude VPC Lattice traffic from encryption enforcement.

Required: No

Type: VpcEncryptionControlExclusion

Allowed values: enable | disable

Update requires: No interruption

VpcPeering

Specifies whether to exclude VPC peering connection traffic from encryption enforcement.

Required: No

Type: VpcEncryptionControlExclusion

Allowed values: enable | disable

Update requires: No interruption