Skip to content

/AWS1/CL_EC2=>CREATEVPCENDPOINT()

About CreateVpcEndpoint

Creates a VPC endpoint. A VPC endpoint provides a private connection between the specified VPC and the specified endpoint service. You can use an endpoint service provided by Amazon Web Services, an Amazon Web Services Marketplace Partner, or another Amazon Web Services account. For more information, see the Amazon Web Services PrivateLink User Guide.

Method Signature

IMPORTING

Required arguments:

IV_VPCID TYPE /AWS1/EC2VPCID /AWS1/EC2VPCID

The ID of the VPC.

IV_SERVICENAME TYPE /AWS1/EC2STRING /AWS1/EC2STRING

The name of the endpoint service.

Optional arguments:

IV_DRYRUN TYPE /AWS1/EC2BOOLEAN /AWS1/EC2BOOLEAN

Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.

IV_VPCENDPOINTTYPE TYPE /AWS1/EC2VPCENDPOINTTYPE /AWS1/EC2VPCENDPOINTTYPE

The type of endpoint.

Default: Gateway

IV_POLICYDOCUMENT TYPE /AWS1/EC2STRING /AWS1/EC2STRING

(Interface and gateway endpoints) A policy to attach to the endpoint that controls access to the service. The policy must be in valid JSON format. If this parameter is not specified, we attach a default policy that allows full access to the service.

IT_ROUTETABLEIDS TYPE /AWS1/CL_EC2VPCENDPTROUTETBL00=>TT_VPCENDPOINTROUTETABLEIDLIST TT_VPCENDPOINTROUTETABLEIDLIST

(Gateway endpoint) The route table IDs.

IT_SUBNETIDS TYPE /AWS1/CL_EC2VPCENDPTSNETIDLS00=>TT_VPCENDPOINTSUBNETIDLIST TT_VPCENDPOINTSUBNETIDLIST

(Interface and Gateway Load Balancer endpoints) The IDs of the subnets in which to create endpoint network interfaces. For a Gateway Load Balancer endpoint, you can specify only one subnet.

IT_SECURITYGROUPIDS TYPE /AWS1/CL_EC2VPCENDPTSECGRIDL00=>TT_VPCENDPTSECURITYGROUPIDLIST TT_VPCENDPTSECURITYGROUPIDLIST

(Interface endpoint) The IDs of the security groups to associate with the endpoint network interfaces. If this parameter is not specified, we use the default security group for the VPC.

IV_IPADDRESSTYPE TYPE /AWS1/EC2IPADDRESSTYPE /AWS1/EC2IPADDRESSTYPE

The IP address type for the endpoint.

IO_DNSOPTIONS TYPE REF TO /AWS1/CL_EC2DNSOPTIONSSPEC /AWS1/CL_EC2DNSOPTIONSSPEC

The DNS options for the endpoint.

IV_CLIENTTOKEN TYPE /AWS1/EC2STRING /AWS1/EC2STRING

Unique, case-sensitive identifier that you provide to ensure the idempotency of the request. For more information, see How to ensure idempotency.

IV_PRIVATEDNSENABLED TYPE /AWS1/EC2BOOLEAN /AWS1/EC2BOOLEAN

(Interface endpoint) Indicates whether to associate a private hosted zone with the specified VPC. The private hosted zone contains a record set for the default public DNS name for the service for the Region (for example, kinesis.us-east-1.amazonaws.com), which resolves to the private IP addresses of the endpoint network interfaces in the VPC. This enables you to make requests to the default public DNS name for the service instead of the public DNS names that are automatically generated by the VPC endpoint service.

To use a private hosted zone, you must set the following VPC attributes to true: enableDnsHostnames and enableDnsSupport. Use ModifyVpcAttribute to set the VPC attributes.

Default: true

IT_TAGSPECIFICATIONS TYPE /AWS1/CL_EC2TAGSPECIFICATION=>TT_TAGSPECIFICATIONLIST TT_TAGSPECIFICATIONLIST

The tags to associate with the endpoint.

IT_SUBNETCONFIGURATIONS TYPE /AWS1/CL_EC2SUBNETCONF=>TT_SUBNETCONFIGURATIONSLIST TT_SUBNETCONFIGURATIONSLIST

The subnet configurations for the endpoint.

RETURNING

OO_OUTPUT TYPE REF TO /AWS1/CL_EC2CREATEVPCENDPTRSLT /AWS1/CL_EC2CREATEVPCENDPTRSLT