Class: Aws::SSOAdmin::Types::NetworkConfigurationInfo

Inherits:
Struct
  • Object
show all
Defined in:
gems/aws-sdk-ssoadmin/lib/aws-sdk-ssoadmin/types.rb

Overview

The network access controls for your Identity Center instance. These controls restrict which networks can reach your instance and applications.

See Also:

Constant Summary collapse

SENSITIVE = 
[]

Instance Attribute Summary collapse

Instance Attribute Details

#allow_source_ips ⇒ Array<String>

Allows access from the IPv4 or IPv6 CIDR blocks that you specify, in addition to the VPCs allowed by RestrictSourceVpcs. If you don't specify this value, no additional IP address ranges are allowed.

Returns:

  • (Array<String>) 


3715
3716
3717
3718
3719
3720
3721
3722
 
# File 'gems/aws-sdk-ssoadmin/lib/aws-sdk-ssoadmin/types.rb', line 3715

class NetworkConfigurationInfo < Struct.new(
  :vpce_access_required,
  :restrict_source_vpcs,
  :allow_source_ips,
  :exclude_application_arns)
  SENSITIVE = []
  include Aws::Structure
end

#exclude_application_arns ⇒ Array<String>

Exempts the applications that you specify from the network access control, so that access to them is unchanged. You can specify both Amazon Web Services managed applications and customer managed applications, and you can use wildcards. These applications are not restricted by RestrictSourceVpcs or AllowSourceIps. If you don't specify this value, the controls apply to all applications.

Returns:

  • (Array<String>) 


3715
3716
3717
3718
3719
3720
3721
3722
 
# File 'gems/aws-sdk-ssoadmin/lib/aws-sdk-ssoadmin/types.rb', line 3715

class NetworkConfigurationInfo < Struct.new(
  :vpce_access_required,
  :restrict_source_vpcs,
  :allow_source_ips,
  :exclude_application_arns)
  SENSITIVE = []
  include Aws::Structure
end

#restrict_source_vpcs ⇒ Array<String>

Limits access to the VPC endpoints in the VPCs that you specify. These VPCs must be in your organization, or in the Amazon Web Services account for an account instance. If you don't specify this value, access is allowed from any VPC in your organization or Amazon Web Services account.

Returns:

  • (Array<String>) 


3715
3716
3717
3718
3719
3720
3721
3722
 
# File 'gems/aws-sdk-ssoadmin/lib/aws-sdk-ssoadmin/types.rb', line 3715

class NetworkConfigurationInfo < Struct.new(
  :vpce_access_required,
  :restrict_source_vpcs,
  :allow_source_ips,
  :exclude_application_arns)
  SENSITIVE = []
  include Aws::Structure
end

#vpce_access_required ⇒ Boolean

Specifies whether access to your Identity Center instance and to applications must originate from a VPC endpoint. When this value is true and no other field is specified, access is allowed from any VPC in your organization, or from any VPC in the Amazon Web Services account for an account instance, and applies to all applications. When this value is false, no network access control is enforced and the values of RestrictSourceVpcs, AllowSourceIps, and ExcludeApplicationArns are cleared.

Returns:

  • (Boolean) 


3715
3716
3717
3718
3719
3720
3721
3722
 
# File 'gems/aws-sdk-ssoadmin/lib/aws-sdk-ssoadmin/types.rb', line 3715

class NetworkConfigurationInfo < Struct.new(
  :vpce_access_required,
  :restrict_source_vpcs,
  :allow_source_ips,
  :exclude_application_arns)
  SENSITIVE = []
  include Aws::Structure
end