VpcConfigProps

class aws_cdk.aws_bedrock_agentcore_alpha.VpcConfigProps(*, vpc, allow_all_outbound=None, security_groups=None, vpc_subnets=None)

Bases: object

(experimental) VPC configuration properties.

Only used when network mode is VPC.

Parameters:
  • vpc (IVpc) – (experimental) The VPC to deploy the resource to.

  • allow_all_outbound (Optional[bool]) – (experimental) Whether to allow the resource to send all network traffic (except ipv6). If set to false, you must individually add traffic rules to allow the resource to connect to network targets. Do not specify this property if the securityGroups property is set. Instead, configure allowAllOutbound directly on the security group. Default: true

  • security_groups (Optional[Sequence[ISecurityGroup]]) – (experimental) The list of security groups to associate with the resource’s network interfaces. Only used if ‘vpc’ is supplied. Default: - If the resource is placed within a VPC and a security group is not specified by this prop, a dedicated security group will be created for this resource.

  • vpc_subnets (Union[SubnetSelection, Dict[str, Any], None]) – (experimental) Where to place the network interfaces within the VPC. This requires vpc to be specified in order for interfaces to actually be placed in the subnets. If vpc is not specify, this will raise an error. Default: - the Vpc default strategy if not specified

Stability:

experimental

ExampleMetadata:

fixture=default infused

Example:

vpc = ec2.Vpc(self, "testVPC")

code_interpreter = agentcore.CodeInterpreterCustom(self, "MyCodeInterpreter",
    code_interpreter_custom_name="my_sandbox_interpreter",
    description="Code interpreter with isolated network access",
    network_configuration=agentcore.BrowserNetworkConfiguration.using_vpc(self,
        vpc=vpc
    )
)

code_interpreter.connections.add_security_group(ec2.SecurityGroup(self, "AdditionalGroup", vpc=vpc))

Attributes

allow_all_outbound

(experimental) Whether to allow the resource to send all network traffic (except ipv6).

If set to false, you must individually add traffic rules to allow the resource to connect to network targets.

Do not specify this property if the securityGroups property is set. Instead, configure allowAllOutbound directly on the security group.

Default:

true

Stability:

experimental

security_groups

(experimental) The list of security groups to associate with the resource’s network interfaces.

Only used if ‘vpc’ is supplied.

Default:

  • If the resource is placed within a VPC and a security group is

not specified by this prop, a dedicated security group will be created for this resource.

Stability:

experimental

vpc

(experimental) The VPC to deploy the resource to.

Stability:

experimental

vpc_subnets

(experimental) Where to place the network interfaces within the VPC.

This requires vpc to be specified in order for interfaces to actually be placed in the subnets. If vpc is not specify, this will raise an error.

Default:
  • the Vpc default strategy if not specified

Stability:

experimental