Package com.pulumi.aws.ec2

Class VpcEncryptionControl

  • public class VpcEncryptionControl
extends com.pulumi.resources.CustomResource
    Manages a VPC Encryption Control. ## Example Usage ### Basic Usage 
     
 package generated_program;
 
 import com.pulumi.Context;
 import com.pulumi.Pulumi;
 import com.pulumi.core.Output;
 import com.pulumi.aws.ec2.Vpc;
 import com.pulumi.aws.ec2.VpcArgs;
 import com.pulumi.aws.ec2.VpcEncryptionControl;
 import com.pulumi.aws.ec2.VpcEncryptionControlArgs;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.Map;
 import java.io.File;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 
 public class App {
     public static void main(String[] args) {
         Pulumi.run(App::stack);
     }
 
     public static void stack(Context ctx) {
         var exampleVpc = new Vpc("exampleVpc", VpcArgs.builder()
             .cidrBlock("10.1.0.0/16")
             .build());
 
         var example = new VpcEncryptionControl("example", VpcEncryptionControlArgs.builder()
             .vpcId(exampleVpc.id())
             .mode("monitor")
             .build());
 
     }
 }
    ## Import ### Identity Schema #### Required * `id` (String) VPC Encryption Control ID. #### Optional * `accountId` (String) Account ID where this resource is managed. * `region` (String) Region where this resource is managed. Using `pulumi import`, import VPC Encryption Control using the `id`. For example: ```sh $ pulumi import aws:ec2/vpcEncryptionControl:VpcEncryptionControl example vpcec-12345678901234567 ```

    • Nested Class Summary

      • Nested classes/interfaces inherited from class com.pulumi.resources.CustomResource

        com.pulumi.resources.CustomResource.CustomResourceInternal

      • Nested classes/interfaces inherited from class com.pulumi.resources.Resource

        com.pulumi.resources.Resource.LazyField<T extends java.lang.Object>, com.pulumi.resources.Resource.LazyFields, com.pulumi.resources.Resource.ResourceInternal

    • Field Summary

      • Fields inherited from class com.pulumi.resources.Resource

        childResources, remote

    • Constructor Detail

      • VpcEncryptionControl

        public VpcEncryptionControl​(java.lang.String name)
        Parameters:
        name - The _unique_ name of the resulting resource.

      • VpcEncryptionControl

        public VpcEncryptionControl​(java.lang.String name,
                            VpcEncryptionControlArgs args)
        Parameters:
        name - The _unique_ name of the resulting resource.
        args - The arguments to use to populate this resource's properties.

      • VpcEncryptionControl

        public VpcEncryptionControl​(java.lang.String name,
                            VpcEncryptionControlArgs args,
                            @Nullable
                            com.pulumi.resources.CustomResourceOptions options)
        Parameters:
        name - The _unique_ name of the resulting resource.
        args - The arguments to use to populate this resource's properties.
        options - A bag of options that control this resource's behavior.

    • Method Detail

      • egressOnlyInternetGatewayExclusion

        public com.pulumi.core.Output<java.lang.String> egressOnlyInternetGatewayExclusion()
        Returns:
        Whether to exclude Egress-Only Internet Gateways from encryption enforcement. Valid values are `disable` or `enable`. Default is `disable`. Only valid when `mode` is `enforce`.

      • elasticFileSystemExclusion

        public com.pulumi.core.Output<java.lang.String> elasticFileSystemExclusion()
        Returns:
        Whether to exclude Elastic File System (EFS) from encryption enforcement. Valid values are `disable` or `enable`. Default is `disable`. Only valid when `mode` is `enforce`.

      • internetGatewayExclusion

        public com.pulumi.core.Output<java.lang.String> internetGatewayExclusion()
        Returns:
        Whether to exclude Internet Gateways from encryption enforcement. Valid values are `disable` or `enable`. Default is `disable`. Only valid when `mode` is `enforce`.

      • lambdaExclusion

        public com.pulumi.core.Output<java.lang.String> lambdaExclusion()
        Returns:
        Whether to exclude Lambda Functions from encryption enforcement. Valid values are `disable` or `enable`. Default is `disable`. Only valid when `mode` is `enforce`.

      • mode

        public com.pulumi.core.Output<java.lang.String> mode()
        Returns:
        Mode to enable for VPC Encryption Control. Valid values are `monitor` or `enforce`.

      • natGatewayExclusion

        public com.pulumi.core.Output<java.lang.String> natGatewayExclusion()
        Returns:
        Whether to exclude NAT Gateways from encryption enforcement. Valid values are `disable` or `enable`. Default is `disable`. Only valid when `mode` is `enforce`.

      • region

        public com.pulumi.core.Output<java.lang.String> region()
        Returns:
        Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.

      • resourceExclusions

        public com.pulumi.core.Output<VpcEncryptionControlResourceExclusions> resourceExclusions()
        Returns:
        State of exclusions from encryption enforcement. Will be `nil` if `mode` is `monitor`. See `resourceExclusions` below.

      • state

        public com.pulumi.core.Output<java.lang.String> state()
        Returns:
        Encryption enforcement state for peered VPCs.

      • stateMessage

        public com.pulumi.core.Output<java.lang.String> stateMessage()
        Returns:
        Message providing additional information about the encryption enforcement state.

      • tags

        public com.pulumi.core.Output<java.util.Optional<java.util.Map<java.lang.String,​java.lang.String>>> tags()
        Returns:
        Map of tags to assign to the resource. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.

      • tagsAll

        public com.pulumi.core.Output<java.util.Map<java.lang.String,​java.lang.String>> tagsAll()
        Returns:
        Map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.

      • virtualPrivateGatewayExclusion

        public com.pulumi.core.Output<java.lang.String> virtualPrivateGatewayExclusion()
        Returns:
        Whether to exclude Virtual Private Gateways from encryption enforcement. Valid values are `disable` or `enable`. Default is `disable`. Only valid when `mode` is `enforce`.

      • vpcId

        public com.pulumi.core.Output<java.lang.String> vpcId()
        Returns:
        ID of the VPC the VPC Encryption Control is linked to. The following arguments are optional:

      • vpcLatticeExclusion

        public com.pulumi.core.Output<java.lang.String> vpcLatticeExclusion()
        Returns:
        Whether to exclude VPC Lattice from encryption enforcement. Valid values are `disable` or `enable`. Default is `disable`. Only valid when `mode` is `enforce`.

      • vpcPeeringExclusion

        public com.pulumi.core.Output<java.lang.String> vpcPeeringExclusion()
        Returns:
        Whether to exclude peered VPCs from encryption enforcement. Valid values are `disable` or `enable`. Default is `disable`. Only valid when `mode` is `enforce`.

      • get

        public static VpcEncryptionControl get​(java.lang.String name,
                                       com.pulumi.core.Output<java.lang.String> id,
                                       @Nullable
                                       VpcEncryptionControlState state,
                                       @Nullable
                                       com.pulumi.resources.CustomResourceOptions options)
        Get an existing Host resource's state with the given name, ID, and optional extra properties used to qualify the lookup.
        Parameters:
        name - The _unique_ name of the resulting resource.
        id - The _unique_ provider ID of the resource to lookup.
        state -
        options - Optional settings to control the behavior of the CustomResource.